CVE-2026-102279 Laravel: XSS in Debug Page Information

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

PT-2026-102378

Name of the Vulnerable Software and Affected Versions Laravel versions prior to 12.69.0 Laravel versions prior to 13.30.0 Description Exception debug pages configured with APP DEBUG=true pass attacker-controlled input to a Tippy.js tooltip. Because the tooltip is configured with allowHTML set to...