CVE-2026-55409
1 advisory.
Packagist/filament/forms CVE-2026-55409: high 7.6
Filament: Disabled RichEditor field state can be used for XSS
Action: Upgrade filament/forms to 3.3.53 or later.
composer require filament/forms:3.3.53Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.3.53 | - |
Fixed versions
| 3.3.53 |
Sources
- osv: GHSA-m9cv-24rx-8mv7
- https://github.com/filamentphp/filament/security/advisories/GHSA-m9cv-24rx-8mv7
- https://github.com/filamentphp/filament/pull/20029
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/releases/tag/v3.3.53
CVE-2026-55409 · published · modified · JSON