CVE-2026-78337: Laravel Unvalidated File Uploadcve-2026-78337-laravel-unvalidated-file-upload
An uploaded file is saved directly from a generic Request instance without input validation. This can lead to unrestricted file uploads (CWE-434) and stored cross-site scripting (CWE-79) via dangerous file types such as SVG documents.