TI-2022-21618 CVE-2022-43984 · GHSA-6q49-35h6-rq2p
Browsershot 3.57.3 - Server Side XSS to LFR via HTML
Priority HIGH 69
Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files.
spatie
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
spatie records in CISA KEVNo spatie vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2022-21617 CVE-2022-43983 · GHSA-82h9-v8vh-mfpq
Browsershot 3.57.2 - Server Side XSS to LFR via HTML
Priority HIGH 69
Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.
TI-2022-20098 CVE-2022-41706 · GHSA-8c2c-jxwj-jqgf
Browsershot 3.57.2 - Server Side XSS to LFR via URL
Priority HIGH 69
Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.
TI-2026-63016 CVE-2026-93534 · GHSA-m88j-9w7j-676j
spatie Scotty Self Update SelfUpdater.php update code download
Priority MEDIUM 63
A vulnerability was identified in spatie Scotty up to 1.4.2.
TI-2026-63015 CVE-2026-93533 · GHSA-q246-734p-8872
spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection
Priority MEDIUM 57
A vulnerability was determined in spatie Scotty up to 1.4.4.
TI-2021-20389 CVE-2021-45040 · GHSA-qc53-8q7w-83c4
The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel…
Priority MEDIUM 48
The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows remote attackers to upload executable files via the uploads route.
TI-2026-35915 CVE-2026-48557 · GHSA-3ggm-c5m7-hfv5
Spatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php
Priority MEDIUM 40
Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer().
TI-2026-84894 CVE-2026-121589 · GHSA-p33r-pgmg-6pq6
Incorrect type conversion in spatie url-signer URL validation
Priority LOW 31
A weakness has been identified in spatie url-signer up to 2.1.3.
TI-2020-06306 CVE-2020-7790 · GHSA-rv74-mh27-4jpv
Arbitrary file read in spatie/browsershot
Priority LOW 26
This affects the package spatie/browsershot from 0.0.0.
TI-2026-35914 CVE-2026-48555 · GHSA-fggg-964j-3j7h
Spatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl()
Priority LOW 24
Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controll…