Skip to content
OpenAdvisories

Package · Packagist

almirhodzic/nova-toggle-5

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-42202

    nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields

    nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by web + auth:<guard> middleware. Any user authenticated on the configured guard …

    almirhodzic nova-toggle-5 almirhodzic/nova-toggle-5 Packagist