Vulnerabilities in KnpLabs

4 results

CVE-2023-28115CRITICALSnappy vulnerable to PHAR deserialization, allowing remote code executionEPSS 2.8%CVE-2023-41330CRITICALUnsafe deserialization in knplabs/knp-snappyEPSS 1.9%CVE-2026-46683MEDIUMSnappy: SSRF and local file read via the xsl-style-sheet optionEPSS 0.2%CVE-2026-46643HIGHSnappy: Binary path is never shell-escaped due to an inverted is_executable checkEPSS 0.2%