CVE-2026-49970
1 advisory.
Packagist/plank/laravel-mediable CVE-2026-49970: high 8.8, EPSS 1.03%
Laravel-Mediable: path traversal vulnerability in the File::sanitizePath()
Action: Upgrade plank/laravel-mediable to 7.0.0 or later.
composer require plank/laravel-mediable:7.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.0 | - |
Fixed versions
| 7.0.0 |
Sources
- osv: GHSA-xv8g-76mx-2rxc
- https://nvd.nist.gov/vuln/detail/CVE-2026-49970
- https://github.com/plank/laravel-mediable/pull/391
- https://github.com/plank/laravel-mediable/commit/6d1e7fb39922fdfb3b2d120e13f4eb2e653ae082
- https://github.com/plank/laravel-mediable
- https://github.com/plank/laravel-mediable/releases/tag/7.0.0
- https://www.vulncheck.com/advisories/laravel-mediable-path-traversal-via-file-sanitizepath
CVE-2026-49970 · published · modified · JSON