{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.3.1"}],"component":"alexusmai/laravel-file-manager","cve_ids":["CVE-2025-65346"],"ecosystem":"Packagist","epss":0.00954,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q5hg-wppq-r2cc","id":"tcs_01M5KF6ZBCNG2KY1WHS0RGKYA7","modified_at":"2025-12-05T23:13:51.651318Z","published_at":"2025-12-04T15:30:33Z","references":["https://osv.dev/vulnerability/GHSA-q5hg-wppq-r2cc","https://nvd.nist.gov/vuln/detail/CVE-2025-65346","https://github.com/Theethat-Thamwasin/CVE-2025-65346","https://github.com/Theethat-Thamwasin/CVE-2025-65346/blob/main/POC-CVE-65346.md","https://github.com/alexusmai/laravel-file-manager"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-q5hg-wppq-r2cc","url":"https://osv.dev/vulnerability/GHSA-q5hg-wppq-r2cc"}],"summary":"alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality"}