CLSA-2026-1783645380 TuxCare security update for spatie/laravel-medialibrary (2 CVEs)

TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 9.12.4-p2+tuxcare...

CLSA-2026-1783558973 TuxCare security update for spatie/laravel-medialibrary (2 CVEs)

TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 10.15.0-p2+tuxcare...

CLSA-2026-1768524779 TuxCare security update for spatie/laravel-medialibrary (1 CVE)

TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 10.15.0-p1+tuxcare...

CLSA-2026-1768524780 TuxCare security update for spatie/laravel-medialibrary (1 CVE)

TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 9.12.4-p1+tuxcare...

PT-2026-73705

TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 10.15.0-p1+tuxcare...

PT-2026-75347

TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 9.12.4-p2+tuxcare...

PT-2026-75341

TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 10.15.0-p2+tuxcare...

PT-2026-73706

TuxCare rebuilt spatie/laravel-medialibrary to address 1 CVE. Fixed in 9.12.4-p1+tuxcare...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the addMediaFromUrl function. An attacker can make the server initiate arbitrary outbound HTTP requests by supplying crafted URLs. Remediation Upgrade spatie/laravel-medialibrary to version 11.23.0 o...

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the defaultSanitizer function in FileAdder.php. An attacker can upload files with double extensions or omitted executable extensions, potentially leading to remote code execution by bypassing fil...

EUVD-2018-17736

Malware in sbrugna...

EUVD-2023-59441

Malicious code in bioql PyPI...

CVE-2023-52953

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2023-52953

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2023-52953

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2023-52953

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2023-52953

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2023-52953

The CVE-2023-52953 entry describes a path traversal vulnerability in the Medialibrary module. Affected software is not concretely specified in the provided documents; the root cause details are not disclosed here. Impact is stated as affecting integrity and confidentiality, with CVSS-derived metr...

PT-2025-1559 · Unknown · Medialibrary

Name of the Vulnerable Software and Affected Versions: Medialibrary module affected versions not specified Description: The issue is related to a path traversal vulnerability in the Medialibrary module. Successful exploitation of this vulnerability will affect the integrity and confidentiality of...

CVE-2023-52953: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...