Skip to content
OpenAdvisories

Vendor

cesargb

1 known vulnerabilities.

Products

laravel-magiclink 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-61701

    Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution

    Laravel MagicLink creates links for authentication without a password or for accessing private content. From 2.0.0 until 2.25.1, MagicLink stores serialized action objects in the magic_links.action database column and deserializes them through src/MagicLink.p…

    cesargb laravel-magiclink cesargb/laravel-magiclink Packagist