Skip to content
OpenAdvisories

Vendor

plank

6 known vulnerabilities.

Products

laravel-mediable 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-93352

    Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload

    Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blocklist in config/mediable.php. The blocklist introduced to address CVE-2026-49972 includes phpt but omit…

    plank laravel-mediable
  • Critical 9.8
    CVE-2026-4809

    Unsafe Client MIME Type Handling Can Enable Arbitrary File Upload in plank/laravel-mediable

    plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME type during file upload handling. In that configuration, a remote attacker can submit a file…

    plank laravel-mediable