Skip to content
OpenAdvisories

Package · Packagist

maatwebsite/excel

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-84374

    Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

    Laravel Excel provides supercharged Excel exports and imports in Laravel. From 3.1.8 until 3.1.70, in src/Files/Disk.php the Maatwebsite\Excel\Files\Disk::copy() method resolves the caller-controlled $destination supplied through Excel::store(), $export->stor…

    SpartnerNL Laravel-Excel maatwebsite/excel Packagist