SpartnerNL vulnerabilities

Products

• Laravel-Excel 1

Latest SpartnerNL CVEs

Newest publication first

1. CVE-2026-84374 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

   Published 2026-09-01

   High·CVSS 7.5 EPSS 0.84%

   Laravel Excel provides supercharged Excel exports and imports in Laravel. From 3.1.8 until 3.1.70, in src/Files/Disk.php the Maatwebsite\Excel\Files\Disk::copy() method resolves the caller-controlled $destination supplied through Excel::store(), $export->store(), or storeExcel()...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.