Skip to content
Security advisoryCVE-2025-3192

Browsershot Server-Side Request Forgery (SSRF) via setURL() Function

HighPublished Original advisory

As published by the sources

Affected packages

Derived from the fixed versions above

What to do

  1. No fixed version is listed in the checked sources for spatie/browsershot. Review the original advisory for workarounds and watch for a patched release.

To see which version you have installed, run composer show vendor/package. Running composer audit lists the known advisories that match your installed versions.

References

laravel.now is an independent community project. It is not affiliated with, endorsed by, sponsored by, or in any way officially connected to Laravel, Laravel LLC, Taylor Otwell, or the Laravel framework maintainers. Laravel is a trademark of Taylor Otwell. All other trademarks belong to their respective owners.

This site is operated by the makers of Lockhound. Links to Lockhound are promotional.