Vulnerability Database

GHSA-7m6h-rg42-m449

Packagist/filament/filament

Filament: Multi-factor authentication (app) management actions do not require password reauthentication 5 hours ago

Fix available
Severity - 5.4 (Medium)

GHSA-8fxw-fmj8-xp7j

Packagist/mongodb/mongodb

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs 5 hours ago

Fix available
Severity - 6.1 (Medium)

GHSA-96h3-5x6v-m776

Packagist/composer/composer

Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path 3 days ago

Fix available
Severity - 6.1 (Medium)

CLSA-2026-1790872344

TuxCare:Packagist/drupal/core

TuxCare security update for drupal/core (2 CVEs) 4 days ago

Fix available

CLSA-2026-1790872226

TuxCare:Packagist/zendframework/zendframework

TuxCare security update for zendframework/zendframework (1 CVE) 4 days ago

Fix available

CLSA-2026-1790868699

TuxCare:Packagist/livewire/livewire

TuxCare security update for livewire/livewire (1 CVE) 4 days ago

Fix available

CLSA-2026-1790868507

TuxCare:Packagist/laravel/framework

TuxCare security update for laravel/framework (1 CVE) 4 days ago

Fix available

CLSA-2026-1790868478

TuxCare:Packagist/league/flysystem

TuxCare security update for league/flysystem (1 CVE) 4 days ago

Fix available

CLSA-2026-1790868445

TuxCare:Packagist/livewire/livewire

TuxCare security update for livewire/livewire (1 CVE) 4 days ago

Fix available

CLSA-2026-1790868391

TuxCare:Packagist/mobiledetect/mobiledetectlib

TuxCare security update for mobiledetect/mobiledetectlib (1 CVE) 4 days ago

Fix available

GHSA-97jj-33gv-5xf9

Packagist/league/commonmark

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal 5 days ago

Fix available
Severity - 6.1 (Medium)

GHSA-3q6v-r5mr-hxv8

Packagist/league/commonmark

league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan 5 days ago

Fix available
Severity - 7.5 (High)

GHSA-jh5r-qr3c-85q8

Packagist/laravel/framework

Laravel: XSS in Debug Page Information 6 days ago

Fix available
Severity - 3.1 (Low)

GHSA-cxf4-7mrp-vvpr

Packagist/league/flysystem

Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter 6 days ago

Fix available
Severity - 3.5 (Low)

GHSA-r6hr-vr92-vv28

Packagist/phpcsstandards/phpcsutils

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey() 6 days ago

Fix available
Severity - 8.6 (High)

GHSA-g7vj-c29h-3h5m

Packagist/fof/oauth

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider 25 Sep

Fix available
Severity - 9.8 (Critical)

Vulnerabilities