CLSA-2026-1793215035 TuxCare security update for spatie/image-optimizer (1 CVE)

TuxCare rebuilt spatie/image-optimizer to address 1 CVE. Fixed in 1.5.0-p1+tuxcare...

Deserialization Of Untrusted Data

spatie/image-optimizer is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to a lack of file protocol checks before it's passed to the fileexists function. This allows attackers to use the phar:// protocol to deserialize a malicious script, which results in Remote Code...