{"action":"Upgrade cesargb/laravel-magiclink to 2.25.1 or later.","affected":[{"fixed":"2.25.1","introduced":"2.0.0"}],"component":"cesargb/laravel-magiclink","cve_ids":["CVE-2026-61701"],"ecosystem":"Packagist","epss":0.00762,"exploited":false,"fixed_versions":["2.25.1"],"ghsa_id":"GHSA-r33w-fg8j-9c94","id":"tcs_01M5KF7SE6Y3B1B2VTSR7PNKV7","modified_at":"2026-09-15T03:56:02.048973944Z","published_at":"2026-02-12T22:11:56Z","references":["https://osv.dev/vulnerability/GHSA-r33w-fg8j-9c94","https://github.com/cesargb/laravel-magiclink/security/advisories/GHSA-r33w-fg8j-9c94","https://github.com/cesargb/laravel-magiclink","https://github.com/cesargb/laravel-magiclink/releases/tag/v2.25.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r33w-fg8j-9c94","url":"https://osv.dev/vulnerability/GHSA-r33w-fg8j-9c94"}],"summary":"MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution"}