<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: filamentphp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-33080: Filament is a collection of full-stack components for accelerated Laravel development</title><link>https://patchthecve.com/cve/CVE-2026-33080.html</link><guid>https://patchthecve.com/cve/CVE-2026-33080.html</guid><pubDate>Wed, 17 Jun 2026 10:36:55 +0000</pubDate><description>HIGH 7.3: Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.8.4 and 5.0.0 through 5.3.4 have two Filament Table summarizers (Range, Values) that render raw database values without escaping HTML. If there is a lack of validation for the data in the </description></item><item><title>CVE-2025-67507: Filament is a collection of full-stack components for accelerated Laravel development</title><link>https://patchthecve.com/cve/CVE-2025-67507.html</link><guid>https://patchthecve.com/cve/CVE-2025-67507.html</guid><pubDate>Wed, 14 Oct 2026 21:10:00 +0000</pubDate><description>HIGH 8.1: Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect email-</description></item><item><title>CVE-2024-47186: Filament is a collection of full-stack components for Laravel development</title><link>https://patchthecve.com/cve/CVE-2024-47186.html</link><guid>https://patchthecve.com/cve/CVE-2024-47186.html</guid><pubDate>Wed, 17 Jun 2026 07:56:41 +0000</pubDate><description>MEDIUM 6.1: Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and contain a specific set of characters, applic</description></item></channel></rss>