Filamentphp Filament

10 CVEs affecting Filamentphp Filament. Latest disclosed: 2026-06-22. Critical: 0, High: 4.

Top CVEs affecting Filamentphp Filament
CVESeverityScorePublishedSummary
CVE-2025-67507High8.12025-12-10Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery…
CVE-2026-55409High7.62026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw st…
CVE-2026-48505High7.42026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, a flaw in the handling of recovery co…
CVE-2026-33080High7.32026-03-20Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.8.4 and 5.0.0 through 5.3.4 have two Filament T…
CVE-2026-48500Medium6.52026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.52, 4.11.5, and 5.6.5, any schema can contain a fil…
CVE-2026-48067Medium6.52026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From filament/actions 4.0.0 until 4.11.4 and 5.6.4 and from filament/tab…
CVE-2026-48167Medium6.42026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry compon…
CVE-2024-47186Medium6.12024-09-27Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scrip…
CVE-2026-48166Medium5.32026-06-22Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the login page has an observable timi…
CVE-2024-517582024-11-07Filament is a collection of full-stack components for accelerated Laravel development. All Filament features that interact with storage use the `default_filesy…