Threats affecting pkg:composer/spatie/laravel-medialibrary

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-48555spatie laravel-medialibrary · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.2%2026-05-29CVE Database V5CVE-2026-48555 Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php. EPSS 0.2%Vulnerability	CVE Database V5	2026-05-29

Page 1 of 1