knplabs Snappy Vulnerabilities

Knplabs Snappy vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

10 June 2026

Snappy: SSRF and local file read via the xsl-style-sheet option
CVE-2026-46683
KnplabsSnappy6.9MEDIUM
Snappy: Binary path is never shell-escaped due to an inverted is_executable check
CVE-2026-46643
KnplabsSnappy7.5HIGH

6 September 2023

Unsafe deserialization in knplabs/knp-snappy
CVE-2023-41330
KnplabsSnappy9.8CRITICAL

17 March 2023

Snappy vulnerable to PHAR deserialization, allowing remote code execution
CVE-2023-28115
KnplabsSnappyEPSS 11%9.8CRITICAL