CVE-2026-49970

High

Advisory

Published 13 Jul 2026In the index since 8 Sept 2026

Laravel-Mediable: path traversal vulnerability in the File::sanitizePath()

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
plank/laravel-mediablecomposer	5.9.0, 5.9.1	7.0.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 4 container images this version deploys carry CVE-2026-49970.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.1.21-fpm-alpine-nginx	e7d5c245b1a0	plank/laravel-mediable@5.9.1	7.0.0

4,333

akauntingnas-helm-charts

1 of the 2 container images this version deploys carry CVE-2026-49970.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	plank/laravel-mediable@5.9.0	7.0.0

12,813

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
akaunting/akaunting :3.0.15	52811b36ec3a	plank/laravel-mediable@5.9.0	7.0.0	1
akaunting/akaunting :3.1.21-fpm-alpine-nginx	e7d5c245b1a0	plank/laravel-mediable@5.9.1	7.0.0	1