Packagist/filament/actions CVE-2026-48067: medium 6.5
Filament has inconsistent scope enforcement for its AttachAction and AssociateAction Select fields
Action: Upgrade filament/actions to 4.11.4 or later.
composer require filament/actions:4.11.4composer require filament/actions:5.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.11.4 | - |
| 5.0.0 | 5.6.4 | - |
Fixed versions
| 4.11.4 | 5.6.4 |
Sources
- osv: GHSA-7q3w-xqjw-g3cr#Packagist/filament/actions
- https://github.com/filamentphp/filament/security/advisories/GHSA-7q3w-xqjw-g3cr
- https://nvd.nist.gov/vuln/detail/CVE-2026-48067
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/releases/tag/v3.3.51
- https://github.com/filamentphp/filament/releases/tag/v4.11.4
- https://github.com/filamentphp/filament/releases/tag/v5.6.4
CVE-2026-48067 · published · modified · JSON