Skip to content
OpenAdvisories

Vendor

spatie

6 known vulnerabilities.

Products

Scotty 2 laravel-medialibrary 2 browsershot 1 url-signer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-126779

    Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml()

    Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read server files by supplying root-relative references in HTML passed to setHtml(). Attackers can embed iframe, img, link or script elements referencing p…

    spatie browsershot
  • High 8.8
    CVE-2026-48557

    Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php

    Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(). The sanitizer checks only the final filename suffix, allowing double-extension filenames such as shell.php.jpg to bypass the blockl…

    spatie laravel-medialibrary spatie/laravel-medialibrary Packagist
  • High 7.4
    CVE-2026-48555

    Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl()

    Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method…

    spatie laravel-medialibrary spatie/laravel-medialibrary Packagist