What is GHSA-rr44-8j7r-jg2q?

GHSA-rr44-8j7r-jg2q is a security advisory published by GitHub Security Advisories with Low severity. alexusmai laravel-file-manager is vulnerable to Directory Traversal

Which CVE IDs does GHSA-rr44-8j7r-jg2q cover?

GHSA-rr44-8j7r-jg2q covers the following CVE IDs: CVE-2025-65345. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-rr44-8j7r-jg2q?

GHSA-rr44-8j7r-jg2q affects 1 product, including: composer/alexusmai/laravel-file-manager:\u003c= 3.3.1.

GHSA-rr44-8j7r-jg2qLow

alexusmai laravel-file-manager is vulnerable to Directory Traversal

Vendor

GitHub Security Advisories

Published

December 3, 2025

Last Modified

December 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-65345 →

📋 Description

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.

🎯 Affected products1

composer/alexusmai/laravel-file-manager:<= 3.3.1

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-65345
https://github.com/tlekrean/CVE-2025-65345
https://github.com/advisories/GHSA-rr44-8j7r-jg2q