Filamentphp vulnerabilities
We track 4 vulnerabilities in Filamentphp products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.
Latest Filamentphp vulnerabilities
- 8.1 High severity
filament: Improper Authentication
Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-field handling allows app-based multi-factor authentication to be bypassed when recovery codes are enab
- 7.6 High severity
filament: Improper Neutralization of Input During Web Page Generation
Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state without sanitizing HTML. Where the data stored in this field's state isn't sanitized already when
- 7.4 High severity
filament: Concurrent Execution using Shared Resource with Improper Synchronization
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, a flaw in the handling of recovery codes for app-based multi-factor authentication allows the same recovery code to be reused via concurre
- 8.1 High severity
filament: Improper Authentication
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefin