https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:38:41.151732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329190 EUVD-2026-329190 2026-10-04T22:38:41.205811+00:00 EUVD-2026-329190 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48166 fkie_cve-2026-48166 2026-10-04T22:38:41.205853+00:00

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, the login page has an observable timing discrepancy that allows unauthenticated attackers to enumerate registered email addresses. The impact is limited to disclosing whether an account exists for a given email. This vulnerability is fixed in 4.11.5 and 5.6.5.

 https://cve.radiocsirt.org/vuln/ghsa-5w46-g9pq-wh6f GHSA-5w46-g9pq-wh6f — Filament: Timing-based user enumeration on login page 2026-10-04T22:38:41.205900+00:00

Affected: Packagist: filament/filament

The login page has an observable timing discrepancy that allows unauthenticated attackers to enumerate registered email addresses. The impact is limited to disclosing whether an account exists for a given email.