Known Vulnerabilities for Url-signer by Spatie
Listed below are 10 of the newest known vulnerabilities associated with "Url-signer" by "Spatie".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121589 json | A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the ... | Not Provided | 2026-11-04 | 2026-11-03 |
| CVE-2026-118768 json | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from ... | Not Provided | 2026-10-29 | 2026-11-03 |
| CVE-2026-114611 json | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device ma... | Not Provided | 2026-10-22 | 2026-10-29 |
| CVE-2026-108699 json | hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious Web... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-107587 json | Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthent... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107567 json | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthe... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-104445 json | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-100413 json | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unen... | Not Provided | 2026-10-14 | 2026-10-29 |
| CVE-2026-99220 json | In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The PKCS... | Not Provided | 2026-11-02 | 2026-11-03 |
| CVE-2026-97731 json | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Am... | Not Provided | 2026-09-25 | 2026-09-25 |