{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"php-laravel-framework","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NPJXSCBEWJ07H25QFYP3SD","modified_at":"2026-10-28T05:00:09.140669890Z","published_at":"2026-09-28T21:17:16.710Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-102279","https://security-tracker.debian.org/tracker/CVE-2026-102279"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-102279","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-102279"}],"summary":"Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML t"}