[HIGH] alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

PKSA-1wr2-d1dm-qbvs CVE-2025-65346 GHSA-q5hg-wppq-r2cc

Affected version: <=3.3.1

Reported by:
GitHub

[LOW] alexusmai laravel-file-manager is vulnerable to Directory Traversal

PKSA-hxrf-fpvh-g3vm CVE-2025-65345 GHSA-rr44-8j7r-jg2q

Affected version: <=3.3.1

Reported by:
GitHub