CVE-2026-61701
1 advisory.
Packagist/cesargb/laravel-magiclink CVE-2026-61701: high 8.8
MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
Action: Upgrade cesargb/laravel-magiclink to 2.25.1 or later.
composer require cesargb/laravel-magiclink:2.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.25.1 | - |
Fixed versions
| 2.25.1 |
Sources
- osv: GHSA-r33w-fg8j-9c94
- https://github.com/cesargb/laravel-magiclink/security/advisories/GHSA-r33w-fg8j-9c94
- https://github.com/cesargb/laravel-magiclink
- https://github.com/cesargb/laravel-magiclink/releases/tag/v2.25.1
CVE-2026-61701 · published · modified · JSON