Browse all 6 CVE security advisories affecting spatie. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-126779 | Spatie Browsershot 2.2.0 before 5.5.0 Local File Read via setHtml() — browsershot CWE-73 | 7.5 | High | 2026-11-11 |
| CVE-2026-121589 | spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion — url-signer CWE-704 | 5.3 | Medium | 2026-11-03 |
| CVE-2026-93534 | spatie Scotty Self Update SelfUpdater.php update code download — Scotty CWE-494 | 6.3 | Medium | 2026-09-18 |
| CVE-2026-93533 | spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection — Scotty CWE-78 | 6.3 | Medium | 2026-09-18 |
| CVE-2026-48557 | Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php — laravel-medialibrary CWE-184 | 8.8 | High | 2026-05-29 |
| CVE-2026-48555 | Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl() — laravel-medialibrary CWE-918 | 7.4 | High | 2026-05-29 |
This page lists every published CVE security advisory associated with spatie. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.