Lookyloo

5 CVEs across 3 Lookyloo products. Browse Lookyloo vulnerabilities, severities, and proof-of-concept exploits.

Lookyloo products with known CVEs

ProductCVEs
Lookyloo6
Playwrightcapture3
Playwright Capture1
Lookyloo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-732102026-08-11A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_global_lookup option was enabled. PlaywrightCapture i…
CVE-2026-669132026-07-28Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted Z…
CVE-2026-668242026-07-27A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into…
CVE-2026-631752026-07-15PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, m…
CVE-2026-44439High7.52026-05-13PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resourc…
CVE-2025-66460Medium6.12025-12-02Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, Lookyloo pass…
CVE-2025-66459Medium6.12025-12-02Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnera…
CVE-2025-66458Medium6.12025-12-02Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, there are mul…
CVE-2025-650952025-11-19Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there…