https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:02:21.076583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341781 EUVD-2026-341781 2026-10-06T17:02:21.217320+00:00 EUVD-2026-341781 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48555 fkie_cve-2026-48555 2026-10-06T17:02:21.217361+00:00

Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php.

 https://cve.radiocsirt.org/vuln/ghsa-fggg-964j-3j7h GHSA-fggg-964j-3j7h — Spatie Laravel Media Library contains a server-side request forgery vulnerability 2026-10-06T17:02:21.217393+00:00

Affected: Packagist: spatie/laravel-medialibrary

Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php.