Skip to content
OpenAdvisories

Package · Packagist

filament/infolists

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.4
    CVE-2026-48167

    Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

    Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the ImageColumn and ImageEntry components render raw database values without escaping HTML. Where the data passed to these components isn…

    filamentphp filament filament/tables filament/infolists Packagist
  • Medium 6.1
    CVE-2024-47186

    Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

    Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and con…

    filamentphp filament filament/tables filament/infolists Packagist