CVE-2021-45040: Spatie Laravel Media Library

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

The Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows remote attackers to upload executable files via the uploads route.

Affected products

• Spatie Laravel Media Library: up to and including 1.17.10; from 2.0.0, up to and including 2.1.6

Published 2022-03-17. Last modified 2026-06-17.