Skip to content
OpenAdvisories

Package · Packagist

filament/forms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-55409

    Filament: Disabled RichEditor field state can be used for XSS

    Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state without sanitizing HTML. Where the data stored in this field's state isn't sanitized already whe…

    filamentphp filament filament/forms Packagist