Log in Start free

spatie

Products

ProductCVEsExploitedLatest
laravel-medialibrary2–May 29, 2026
Scotty2–Sep 18, 2026
url-signer1–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-121589 Medium 5.3 spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion 0.4%
  • CVE-2026-93534 Medium 6.3 spatie Scotty Self Update SelfUpdater.php update code download 0.2%
  • CVE-2026-93533 Medium 6.3 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection 1.4%
  • CVE-2026-48557 High 8.8 Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php 0.4%
  • CVE-2026-48555 High 7.4 Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl() 0.2%