Lookyloo vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20267

Newest CVEs

• CVE-2026-55835

  Lookyloo: Potential sub-system DoS due to parameter missmatch in notification

  Lookyloo · lookyloo

  Medium6.9
• CVE-2026-85242

  Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture

  Lookyloo · PlaywrightCapture

  Medium6.9
• CVE-2026-73210

  Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture

  Lookyloo · PlaywrightCapture

  Medium5.1
• CVE-2026-66913

  Zip Bomb in Lookyloo Capture Upload Allows Denial of Service

  lookyloo · lookyloo

  Medium6.9
• CVE-2026-66824

  Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding

  lookyloo · lookyloo

  Critical9.2
• CVE-2026-63175

  Cross-Capture Session Data Leakage Due to Shared Mutable State in Looklyloo - PlaywrightCapture

  Lookyloo · PlaywrightCapture

  High7.1
• CVE-2026-44439

  LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capture

  Lookyloo · PlaywrightCapture

  Medium6.6
• CVE-2025-66460

  Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

  Lookyloo · lookyloo

  Medium5.3
• CVE-2025-66459

  Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML

  Lookyloo · lookyloo

  Medium5.3
• CVE-2025-66458

  Lookyloo has multiple XSS due to unsafe use of f-strings in Markup

  Lookyloo · lookyloo

  Medium5.3