Security advisoryCVE-2026-48557
Spatie Laravel Media Library contains a file upload restriction bypass
As published by the sources
Affected packages
- Affected
<11.23.0Fixed in11.23.0
Derived from the fixed versions above
What to do
Upgrade spatie/laravel-medialibrary to 11.23.0 or later.
composer update spatie/laravel-medialibrary --with-dependencies
To see which version you have installed, run composer show vendor/package. Running composer audit lists the known advisories that match your installed versions.