https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:58:45.575198+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-19389 EUVD-2026-19389 2026-10-03T11:58:45.657923+00:00 EUVD-2026-19389 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40734 fkie_cve-2022-40734 2026-10-03T11:58:45.657961+00:00

UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-5m2h-7rf2-rpx6 GHSA-5m2h-7rf2-rpx6 — UniSharp Laravel Filemanager directory traversal vulnerability 2026-10-03T11:58:45.657995+00:00

Affected: Packagist: unisharp/laravel-filemanager

UniSharp laravel-filemanager (aka Laravel Filemanager) with `league/flysystem` version `< 2.0.0` allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022.

Since `v2.6.4`, UniSharp laravel-filemanager (aka Laravel Filemanager) requires users to install `league/flysystem` version `>= 2.0.0`.

 https://cve.radiocsirt.org/vuln/gsd-2022-40734 gsd-2022-40734 2026-10-03T11:58:45.658024+00:00 gsd-2022-40734