puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')