CVE-2025-52562: Cve 2025 52562 Laravel Translation Loader Path Traversalcve-2025-52562-cve-2025-52562-laravel-translation-loader-path-traversal
User-controlled HTTP input flows from an unvalidated Illuminate\Http\Request parameter into a Loader::load() call without allowlist validation. An attacker can supply path-traversal sequences (e.g. '../../../') in locale or namespace parameters to escape the translations directory and force inclusion of arbitrary PHP files, enabling unauthenticated remote co
