Spatie vulnerabilities

Products

• Browsershot 4
• Laravel-medialibrary 2
• Scotty 2

Newest

• spatie url-signer spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion CVE-2026-121589 6.9 MediumNovember 3, 2026
• spatie scotty spatie Scotty Self Update SelfUpdater.php update code download CVE-2026-93534 5.3 MediumSeptember 18, 2026
• spatie scotty spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection CVE-2026-93533 5.3 MediumSeptember 18, 2026
• spatie laravel-medialibrary Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php CVE-2026-48557 Fix available 8.7 HighMay 29, 2026
• spatie laravel-medialibrary Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl() CVE-2026-48555 Fix available 5.3 MediumMay 29, 2026
• spatie image optimizer image-optimizer allows PHAR deserialization CVE-2024-34515 Fix available 8.8 HighMay 5, 2024
• spatie browsershot Browsershot 3.57.3 - Server Side XSS to LFR via HTML CVE-2022-43984 Fix available 8.2 HighNovember 25, 2022
• spatie browsershot Browsershot 3.57.2 - Server Side XSS to LFR via HTML CVE-2022-43983 Fix available 8.2 HighNovember 25, 2022
• spatie browsershot Browsershot 3.57.2 - Server Side XSS to LFR via URL CVE-2022-41706 Fix available 8.2 HighNovember 25, 2022
• spatie laravel media library The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows... CVE-2021-45040 9.8 CriticalMarch 17, 2022
• spatie browsershot Arbitrary File Read CVE-2020-7790 Fix available 5.3 MediumDecember 11, 2020