Lucene search
+L

3 matches found

OSV
OSV
added 2026/05/29 7:49 p.m.7 views

CVE-2026-48557 Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php

Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer. The sanitizer checks only the final filename suffix, allowing double-extension filenames such as shell.php.jpg to bypass the blocklist, with pathinfo preserving inner .php...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0References7
Fedora
Fedora
added 2026/05/23 3:49 p.m.12 views

[SECURITY] Fedora 43 Update: pie-1.4.4-1.fc43

PIE PHP Installer for Extensions. PIE can install an extension to any installed PHP version. A list of extensions that support PIE can be found on https://packagist.org/extensions. Documentation: /usr/share/doc/pie/docs/usage.md...

5.8AI score
SaveExploits0
Fedora
Fedora
added 2026/04/23 12:57 a.m.11 views

[SECURITY] Fedora 42 Update: pie-1.4.1-1.fc42

PIE PHP Installer for Extensions. PIE can install an extension to any installed PHP version. A list of extensions that support PIE can be found on https://packagist.org/extensions. Documentation: /usr/share/doc/pie/docs/usage.md...

5.4AI score
SaveExploits0
Rows per page
Query Builder