CVE-2026-71293
1 advisory.
Packagist/statamic/cms CVE-2026-71293: medium 6.2
Statamic CMS exposes two-factor recovery codes through dynamic Antlers rendering
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0-alpha.1 | - | 6.30.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jppw-r5j3-xf7x
- https://nvd.nist.gov/vuln/detail/CVE-2026-71293
- https://github.com/statamic/cms
- https://github.com/statamic/cms/blob/master/src/Auth/AugmentedUser.php
CVE-2026-71293 · published · modified · JSON