Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

CRITICAL 9.8CVE-2022-38916 · GHSA-4v5m-vwvp-p7w8 · Published 20/09/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
pagekit/pagekit Packagist	`≤ 1.0.18`	No fix yet
pagekit pagekit	`= 1.0.18`	No fix yet

Description

A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

NVD description

A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

Running one of these products? Scan your site to see whether it exposes a vulnerable version.