Skip to content
OpenAdvisories

Package · Packagist

plank/laravel-mediable

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-49970

    Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()

    Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader::toDestination(). Att…

    plank laravel-mediable plank/laravel-mediable Packagist