- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 1 high, 3 medium
- Registry
- Packagist
Advisories 4
- CVE-2026-48067Medium 6.5
Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields
Affected: from 3.0.0, fixed in 3.3.51.
- CVE-2026-48167Medium 6.4
Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
Affected: from 4.0.0, fixed in 4.11.5; from 5.0.0, fixed in 5.6.5.
- CVE-2026-33080High 7.3
Filament: Unvalidated Range and Values summarizer values can be used for XSS
Affected: from 4.0.0, fixed in 4.8.5; from 5.0.0, fixed in 5.3.5.
- CVE-2024-47186Medium 6.1
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
Affected: from 3.0.0, fixed in 3.2.115.