Skip to content
OpenAdvisories

Vendor

spatie

6 known vulnerabilities.

Products

Scotty 2 laravel-medialibrary 2 browsershot 1 url-signer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-121589

    spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion

    A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes incorrect type conversion…

    spatie url-signer
  • Medium 6.3
    CVE-2026-93534

    spatie Scotty Self Update SelfUpdater.php update code download

    A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is …

    spatie Scotty
  • Medium 6.3
    CVE-2026-93533

    spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

    A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of…

    spatie Scotty