Executive brief
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
Affected products
- Packagist code16/sharp
Junglewise Threat Intelligence
CVE-2026-33687: Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
CVE-2026-33687 · Severity: low · CVSS 3.1 · Published 2026-03-25
Technologies: code16/sharp (Packagist). Vendors: Packagist.
Related threats
- code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a st
- code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a st
- code16 Sharp missing authorization in Quick Creation Command endpoints
- code16 Sharp authorization bypass in generic download endpoint
- Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil