Skip to content
OpenAdvisories

Vendor

CarbonPHP

1 known vulnerabilities.

Products

carbon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-22145

    Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale

    Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include …

    CarbonPHP carbon php-nesbot-carbon nesbot/carbon Debian Ubuntu Packagist