plank laravel-mediable

• CVE-2026-93352 Critical 9.8 Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload 1.1%
• CVE-2026-49972 High 8.8 Laravel-Mediable < 7.0.0 File Upload RCE via Extension Bypass 1.1%
• CVE-2026-49971 Medium 6.1 Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload 0.4%
• CVE-2026-49970 High 8.8 Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath() 1.0%
• CVE-2026-49969 High 7.4 Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handling 0.4%
• CVE-2026-4809 Critical 9.8 Unsafe Client MIME Type Handling Can Enable Arbitrary File Upload in plank/laravel-mediable 0.9%