XSS in Debug Page Information GHSA-jh5r-qr3c-85q8 published Sep 10, 2026 by andrei-laravel Low
Token-based API guard Auth Bypass GHSA-f9x3-7vq9-cph6 published Oct 19, 2026 by andrei-laravel Critical
Unauthorized Data Destruction GHSA-5wcm-3v2w-8362 published Oct 19, 2026 by andrei-laravel Moderate
Temporary Signed URL Path Confusion GHSA-crmm-hgp2-wgrp published Jun 8, 2026 by andrei-laravel Moderate
CRLF injection in default email rule GHSA-5vg9-5847-vvmq published Jun 1, 2026 by andrei-laravel High
File Validation Bypass GHSA-78fx-h6xr-vch4 published Mar 5, 2025 by taylorotwell Moderate
Environment manipulation via query string GHSA-gv7v-rgg6-548h published Nov 12, 2024 by taylorotwell High
Blade `@parent` Exploitation Leading To Possible XSS GHSA-66hf-2p6w-jqfw published Dec 7, 2021 by taylorotwell Moderate
SQL Server LIMIT / OFFSET SQL Injection GHSA-4mg9-vhxq-vm7j published Apr 28, 2021 by taylorotwell High
Unexpected database bindings via requests (follow-up) GHSA-x7p5-p2c9-phvg published Feb 2, 2021 by taylorotwell High
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
