CVE-2026-84307
1 advisory.
Packagist/filament/filament CVE-2026-84307: low 3.7
Filament: Password validity disclosure for accounts denied panel access on login page
Action: Upgrade filament/filament to 4.12.5 or later.
composer require filament/filament:4.12.5composer require filament/filament:5.7.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.12.5 | - |
| 5.0.0 | 5.7.5 | - |
Fixed versions
| 4.12.5 | 5.7.5 |
Sources
- osv: GHSA-xwpv-pqxp-5v36
- https://github.com/filamentphp/filament/security/advisories/GHSA-xwpv-pqxp-5v36
- https://github.com/filamentphp/filament/pull/20308
- https://github.com/filamentphp/filament/commit/ad5aacbc6d089b3dd7243ec1c1f8ab19dff7c3a1
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/releases/tag/v4.12.5
- https://github.com/filamentphp/filament/releases/tag/v5.7.5
CVE-2026-84307 · published · modified · JSON