https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T03:47:16.231428+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2024-42485 fkie_cve-2024-42485 2026-10-07T03:47:16.350305+00:00

Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.

 https://vulnerability.circl.lu/vuln/ghsa-m3px-vjxr-fx4m GHSA-m3px-vjxr-fx4m — Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint 2026-10-07T03:47:16.350406+00:00

Affected: Packagist: pxlrbt/filament-excel

### Impact The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL.

### Patches Patched with Version v2.3.3

### Credits Thanks to Kevin Pohl for reporting this.