All
top
⌕
Search markets, events…
⌘K
Sign in
Super Bowl
Politics
Sports
Crypto
Tech
Business
Entertainment
AI
World
Trump
Startups
Science
Weather
Culture
Music
Mentions
Home
/
News
/
LaraPlugins — Security Advisories
L
Source
LaraPlugins — Security Advisories
Latest stories indexed from LaraPlugins — Security Advisories.
Follow source
Visit source
Recent stories
28 stories
LaraPlugins — Security Advisories
CVE-2026-49858: [Medium] API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate — api-platform/core
13d ago
LaraPlugins — Security Advisories
CVE-2026-55219: [Medium] Paymenter has race condition in payWithCredit() that enables credit double-spend — paymenter/paymenter
Jun 30, 2026
LaraPlugins — Security Advisories
CVE-2026-47198: [High] Paymenter has URL parameter injection that bypasses paid plan limits at checkout — paymenter/paymenter
Jun 30, 2026
LaraPlugins — Security Advisories
CVE-2026-54329: [High] Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-55542: [Low] Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-55519: [Low] Snipe-IT has Improper Authorization in File Deletion (IDOR) — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-55483: [Medium] Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-55482: [Medium] Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-50550: [Medium] Snipe-IT has a 2FA reset privilege bypass — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-49976: [Medium] Snipe-IT Vulnerable to User Account Escalation via CSV Import — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-49870: [Medium] Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor` — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-48507: [High] Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-48493: [Medium] Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-48492: [Medium] Snipe-IT's selectlist visibility is too permissive — snipe/snipe-it
Jun 23, 2026
LaraPlugins — Security Advisories
CVE-2026-44585: [Medium] Paymenter has broken object level authorization via service reference manipulation on ticket creation — paymenter/paymenter
Jun 22, 2026
LaraPlugins — Security Advisories
CVE-2026-44584: [Medium] Paymenter doesn't reset email verification status after email change — paymenter/paymenter
Jun 22, 2026
LaraPlugins — Security Advisories
CVE-2026-44583: [Medium] Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module — paymenter/paymenter
Jun 22, 2026
LaraPlugins — Security Advisories
CVE-2025-58048: [Critical] Paymenter vulnerable to Remote Code Execution via public file uploads — paymenter/paymenter
Jun 22, 2026
LaraPlugins — Security Advisories
PKSA-m5cs-t1y6-qpcs: [Medium] Laravel Framework: Temporary Signed URL Path Confusion — laravel/framework
Jun 17, 2026
LaraPlugins — Security Advisories
PKSA-3r5d-mb8f-1qw9: [High] Laravel Framework: CRLF injection in default email rule — laravel/framework
Jun 17, 2026
LaraPlugins — Security Advisories
CVE-2026-48019: [Unknown] Laravel CRLF injection in default email rule — laravel/framework
May 19, 2026
LaraPlugins — Security Advisories
CVE-2026-44692: [High] Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint — code16/sharp
May 15, 2026
LaraPlugins — Security Advisories
CVE-2026-44833: [Medium] Snipe-IT has an open redirect vulnerability — snipe/snipe-it
May 8, 2026
LaraPlugins — Security Advisories
CVE-2026-37709: [Critical] Snipe-IT has insecure permissions in file uploads — snipe/snipe-it
May 8, 2026
LaraPlugins — Security Advisories
CVE-2026-44832: [High] Snipe-IT has Privilege Escalation via API Permissions Assignment — snipe/snipe-it
May 8, 2026
LaraPlugins — Security Advisories
CVE-2026-44831: [Medium] Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0) — snipe/snipe-it
May 8, 2026
LaraPlugins — Security Advisories
CVE-2026-33686: [High] Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil — code16/sharp
Mar 25, 2026
LaraPlugins — Security Advisories
CVE-2026-33687: [High] Sharp has Unrestricted File Upload via Client-Controlled Validation Rules — code16/sharp
Mar 25, 2026