CVE-2025-26159
1 advisory.
Packagist/nasirkhan/laravel-starter CVE-2025-26159: medium 6.1, EPSS 0.31%
Laravel Starter Cross Site Scripting (XSS)
Action: Upgrade nasirkhan/laravel-starter to 11.11.0 or later.
composer require nasirkhan/laravel-starter:11.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.11.0 | - |
Fixed versions
| 11.11.0 |
Sources
- osv: GHSA-fpx3-h2pc-88vf
- https://nvd.nist.gov/vuln/detail/CVE-2025-26159
- https://github.com/nasirkhan/laravel-starter
- https://godbadtry.github.io/posts/CVE-2025-26159
CVE-2025-26159 · published · modified · JSON