Security advisories

Advisories affecting Composer packages, taken from public advisory databases. Each entry lists the affected version ranges and fixed versions exactly as published, and links to the original source.

Subscribe via RSS

All Critical High Moderate Low Not provided

High8.9CVE-2026-480194 months ago
Laravel Framework: CRLF injection in default email rule
- laravel/framework
  Affected
  >=13.0.0, <13.10.0<12.60.0
  Fixed in
  12.60.013.10.0
Original advisory (Packagist security advisories)

Laravel Framework: CRLF injection in default email rule