{"action":"Upgrade nasirkhan/laravel-starter to 11.11.0 or later.","affected":[{"fixed":"11.11.0","introduced":"0"}],"component":"nasirkhan/laravel-starter","cve_ids":["CVE-2025-26159"],"ecosystem":"Packagist","epss":0.0031,"exploited":false,"fixed_versions":["11.11.0"],"ghsa_id":"GHSA-fpx3-h2pc-88vf","id":"tcs_01M5KF1YVWAR3E1WGQE2Y153TA","modified_at":"2025-04-22T22:27:12.814851Z","published_at":"2025-04-22T21:30:44Z","references":["https://osv.dev/vulnerability/GHSA-fpx3-h2pc-88vf","https://nvd.nist.gov/vuln/detail/CVE-2025-26159","https://github.com/nasirkhan/laravel-starter","https://godbadtry.github.io/posts/CVE-2025-26159"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fpx3-h2pc-88vf","url":"https://osv.dev/vulnerability/GHSA-fpx3-h2pc-88vf"}],"summary":"Laravel Starter Cross Site Scripting (XSS)"}