Package impact
Packagist / knplabs/knp-snappy
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-46643 | high | — | 8.0 | 8d ago | Snappy: Binary path is never shell-escaped due to an inverted is_executable check | |||
| CVE-2026-46683 | medium | — | 5.5 | 8d ago | Snappy : SSRF and local file read via the xsl-style-sheet option | |||
| CVE-2023-41330 | unknown | — | — | 3y ago | Snappy PHAR deserialization vulnerability | |||
| CVE-2023-28115 | unknown | — | — | 3y ago | PHAR deserialization allowing remote code execution |