{"action":"Upgrade filament/infolists to 3.2.115 or later.","affected":[{"fixed":"3.2.115","introduced":"3.0.0"}],"component":"filament/infolists","cve_ids":["CVE-2024-47186"],"ecosystem":"Packagist","epss":0.00417,"exploited":false,"fixed_versions":["3.2.115"],"ghsa_id":"GHSA-9h9q-qhxg-89xr","id":"tcs_01M5KF02334QWQCT21C3YTDPNF","modified_at":"2026-02-17T21:45:37.313546Z","published_at":"2024-09-27T20:51:01Z","references":["https://osv.dev/vulnerability/GHSA-9h9q-qhxg-89xr","https://github.com/filamentphp/filament/security/advisories/GHSA-9h9q-qhxg-89xr","https://github.com/filamentphp/filament/commit/df7989352464d08eda5837ef50f9997fad902316","https://github.com/filamentphp/filament","https://github.com/filamentphp/filament/releases/tag/v3.2.115"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9h9q-qhxg-89xr#Packagist/filament/infolists","url":"https://osv.dev/vulnerability/GHSA-9h9q-qhxg-89xr"}],"summary":"Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting"}