Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
spatie/laravel-medialibrary could let attackers access files
published 3 months ago
Summary
The Laravel Media Library package from spatie has two security weaknesses that could let a malicious user read or manipulate files on your server. This could expose sensitive data or allow unwanted changes to uploaded content. Apply the latest TuxCare update (version 9.12.4-p2+tuxcare) as soon as possible to fix the issues.
What to do
- Update spatie spatie/laravel-medialibrary to version 9.12.4-p2+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Packagist | spatie | spatie/laravel-medialibrary |
>= 9.12.4, < 9.12.4-p2+tuxcare Fix: upgrade to 9.12.4-p2+tuxcare
|
Original advisory text
TuxCare security update for spatie/laravel-medialibrary (2 CVEs)
TuxCare rebuilt spatie/laravel-medialibrary to address 2 CVEs. Fixed in 9.12.4-p2+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1783645380 · OSV
Track software like this
Free during beta