Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
plank/laravel-mediable <=6.4.0 CRITICAL flaw: attackers can upload PHP code by faking MIME types — risking RCE. No patch. Block client MIME trust & validate server-side now. https://radar.offseq.com/threat/cve-2026-4809-cwe-434-unrestricted-upload-of-file--9d4d9e8e #OffSeq #Laravel #Security
2026-03-26T21:00:19.053Z