Vulnerabilities in Lookyloo
11 resultsCVE-2026-63175HIGHCross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCaptureEPSS 0.5%CVE-2026-73210MEDIUMServer-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCaptureEPSS 0.5%CVE-2026-66824CRITICALStored Cross-Site Scripting via Unsafe Capture Tree JSON EmbeddingEPSS 0.4%CVE-2026-85242MEDIUMServer-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCaptureEPSS 0.4%CVE-2026-66913MEDIUMZip Bomb in Lookyloo Capture Upload Allows Denial of ServiceEPSS 0.4%CVE-2025-65095CRITICALLookyloo is vulnerable due to improper user input sanitizationEPSS 0.4%CVE-2026-44439MEDIUMLookyLoo - PlaywrightCapture permits access to local files and internal network resources during page captureEPSS 0.4%CVE-2026-55835MEDIUMLookyloo: Potential sub-system DoS due to parameter missmatch in notificationEPSS 0.4%CVE-2025-66459MEDIUMLookyloo vulnerable to XSS due to unescaped error message passed to innerHTMLEPSS 0.3%CVE-2025-66458MEDIUMLookyloo has multiple XSS due to unsafe use of f-strings in MarkupEPSS 0.2%CVE-2025-66460MEDIUMLookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to DatatablesEPSS 0.2%