Skip to content
Lookyloo vulnerabilities
Newest
-
lookyloo
Lookyloo: Potential sub-system DoS due to parameter missmatch in notification
CVE-2026-55835
6.9 Medium
-
lookyloo playwrightcapture
Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture
CVE-2026-85242
6.9 Medium
-
lookyloo playwrightcapture
Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture
CVE-2026-73210
5.1 Medium
-
lookyloo
Zip Bomb in Lookyloo Capture Upload Allows Denial of Service
CVE-2026-66913
6.9 Medium
-
lookyloo
Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding
CVE-2026-66824
9.2 Critical
-
lookyloo playwrightcapture
Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture
CVE-2026-63175
7.1 High
-
lookyloo playwrightcapture, playwright capture +1 more
LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture
CVE-2026-44439
Fix available
6.6 Medium
-
lookyloo
Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables
CVE-2025-66460
5.3 Medium
-
lookyloo
Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML
CVE-2025-66459
5.3 Medium
-
lookyloo
Lookyloo has multiple XSS due to unsafe use of f-strings in Markup
CVE-2025-66458
5.3 Medium
-
lookyloo
Lookyloo is vulnerable due to improper user input sanitization
CVE-2025-65095
9.4 Critical