CVE-2026-48019
1 advisory.
Packagist/laravel/framework CVE-2026-48019: high 8.9
Laravel Framework: CRLF injection in default email rule
Action: Upgrade laravel/framework to 12.60.0 or later.
composer require laravel/framework:13.10.0composer require laravel/framework:12.60.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.0.0 | 13.10.0 | - |
| 0 | 12.60.0 | - |
Fixed versions
| 13.10.0 | 12.60.0 |
Sources
- osv: GHSA-5vg9-5847-vvmq
- https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq
- https://github.com/laravel/framework
CVE-2026-48019 · published · modified · JSON