CVE-2025-22145 — Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload — CVE Database · The Intelligence Room