CVE-2026-46683: Knplabs Snappy

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0.

Affected products

• Knplabs Snappy: before 1.7.0 (fixed in 1.7.0)

Published 2026-06-10. Last modified 2026-06-17.