https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T04:24:58.032898+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-77567 fkie_cve-2026-77567 2026-10-12T04:24:59.233743+00:00

Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-field handling allows app-based multi-factor authentication to be bypassed when recovery codes are enabled. Email-based multi-factor authentication is not affected. This issue is fixed in versions 4.12.0 and 5.7.0.

 https://vulnerability.circl.lu/vuln/ghsa-52xp-w8hr-xv3c GHSA-52xp-w8hr-xv3c — Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled 2026-10-12T04:24:59.233882+00:00

Affected: Packagist: filament/filament

A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled.