[HIGH] Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

PKSA-xgss-dh88-nswy CVE-2026-84374 GHSA-c7r6-vx3h-w5g2

Affected package: maatwebsite/excel

Affected version: >=3.1.8,<3.1.70

Reported by:
GitHub