SSRF in Knplabs Snappy

CVE-2026-46683

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in vers…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.