LO
Vendor
lookyloo
12
CVEs
0
On KEV
1
New 30D
Products
LO9.4
lookyloo
lookyloo
7 CVEs0 on KEV1 new
PL7.5
PlaywrightCapture
Lookyloo
4 CVEs0 on KEV0 new
PC7.5
Playwright Capture
Lookyloo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55835 New | LO lookyloo Lookyloo | 6.9 | Oct 23 | Lookyloo: Potential sub-system DoS due to parameter missmatch in notification |
| CVE-2026-85242 | PL PlaywrightCapture Lookyloo | 6.9 | Sep 3 | Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture |
| CVE-2026-73210 | PL PlaywrightCapture Lookyloo | 5.1 | Aug 11 | Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture |
| CVE-2026-66913 | LO lookyloo lookyloo | 6.9 | Jul 28 | Zip Bomb in Lookyloo Capture Upload Allows Denial of Service |
| CVE-2026-66824 | LO lookyloo lookyloo | 9.2 | Jul 27 | Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding |
| CVE-2026-63175 | PL PlaywrightCapture Lookyloo | 7.1 | Jul 15 | Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture |
| CVE-2026-44439 | PL PlaywrightCapture Lookyloo | 7.5 | May 13 | LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture |
| CVE-2025-66460 | LO lookyloo Lookyloo | 6.1 | Dec 2 | Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables |
| CVE-2025-66459 | LO lookyloo Lookyloo | 6.1 | Dec 2 | Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML |
| CVE-2025-66458 | LO lookyloo Lookyloo | 6.1 | Dec 2 | Lookyloo has multiple XSS due to unsafe use of f-strings in Markup |
| CVE-2025-65095 | LO lookyloo Lookyloo | 9.4 | Nov 19 | Lookyloo is vulnerable due to improper user input sanitization |