239 matches found
EUVD-2025-202172
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect...
CVE-2025-67507 Filament's multi-factor authentication (app) recovery codes can be used multiple times
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect...
CVE-2025-67507
CVE-2025-67507 affects Filament versions 4.0.0 through 4.3.0. The vulnerability arises in the handling of app-based multi-factor authentication recovery codes, allowing the same recovery code to be reused indefinitely when recovery codes are enabled (email-based MFA is unaffected). Root cause: im...
Filament 安全漏洞
Filament is a collection of full-stack components for accelerated Laravel development from the Filament open source. A security vulnerability exists in Filament versions 4.0.0 through 4.3.0, which stems from a flaw in the handling of application-based multi-factor authentication recovery code tha...
CVE-2025-67507: Improper Authentication
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect...
EUVD-2025-178362
Malicious code in io-cordelia-meteor-filament npm...
Malicious code in areology-eleventy-cassini-filament (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180106
Malicious code in bellatrix-websockets-filament-biohacking npm...
EUVD-2025-178910
Malicious code in filament-tethys-brane-upgrade npm...
MAL-2025-186972 Malicious code in filament-tethys-brane-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd79b06d69f04ea8b0388bfa6ca124a65859009529152dcd4cb8413e3089e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180360
Malicious code in archaeogenetics-tardigrade-filament-boson npm...
EUVD-2025-175492
Malicious code in xerxes-coronalmassejection-flare-filament npm...
EUVD-2025-178911
Malicious code in filament-axios-node-config-jasmine npm...
EUVD-2025-176413
Malicious code in server-filament-framework-css-minimizer-webpack-plugin npm...
EUVD-2025-177288
Malicious code in pegasus-filament-meteor-impulse npm...
EUVD-2025-176013
Malicious code in terraforming-filament-got-dione npm...
EUVD-2025-180284
Malicious code in astrometry-passport-less-filament npm...
Malicious code in redgiant-nightwatch-filament-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed00d409000e536d8b0c2ac90de69f26c89dd68b20849ea28301e0b7896a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189103 Malicious code in redgiant-nightwatch-filament-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed00d409000e536d8b0c2ac90de69f26c89dd68b20849ea28301e0b7896a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...