Missing Authorization

Overview filament/filament is an A collection of full-stack components for accelerated Laravel app development. Affected versions of this package are vulnerable to Missing Authorization through the WithFileUploads trait. An attacker can upload arbitrary files to temporary storage by submitting...

Authentication Bypass Using an Alternate Path or Channel

Overview filament/filament is an A collection of full-stack components for accelerated Laravel app development. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to the handling of recovery codes for app-based multi-factor...

EUVD-2025-180334

Malicious code in areology-eleventy-cassini-filament npm...

EUVD-2025-180237

Malicious code in auriga-postgres-fermion-filament npm...

MAL-2025-44700 Malicious code in ini-nodejs-speleology-filament (npm)

The package ini-nodejs-speleology-filament was found to contain malicious code...