KnpLabs

Products

ProductCVEsExploitedLatest
snappy4–Jun 10, 2026

Exploited and recent CVEs

  • CVE-2026-46683 Medium 6.9 Snappy: SSRF and local file read via the xsl-style-sheet option 0.2%
  • CVE-2026-46643 High 7.5 Snappy: Binary path is never shell-escaped due to an inverted is_executable check 0.2%
  • CVE-2023-41330 Critical 9.8 Unsafe deserialization in knplabs/knp-snappy 2.3%
  • CVE-2023-28115 Critical 9.8 Snappy vulnerable to PHAR deserialization, allowing remote code execution 2.8%