CYBERHAWK / CVE / CVE-2026-48555

CVE-2026-48555

Spatie Laravel Media Library

HIGH CVSS 7.4 vibe oss

The flaw

Server-side request forgery via user-controlled URLs in addMediaFromUrl method.

What to do

Update to version 11.23.0 or later

▸ Scan my repo for CVE-2026-48555

References

First seen 2026-06-05 · Tracked by PickBits CyberHawk · Weekly CVE digest