Security

Report a vulnerability

SECURITY.md

Security Policy

Please review the Version Support Policy on our website.

Reporting a Vulnerability

If you discover a security vulnerability within Filament, please report it through GitHub. All security vulnerabilities will be promptly addressed.

Exported files stored in default (public) filesystem if not reconfigured
GHSA-4hxw-gc2q-f6f3 published Nov 7, 2024 by danharrin

Low
Unvalidated ColorColumn and ColorEntry values can be used for XSS
GHSA-9h9q-qhxg-89xr published Sep 27, 2024 by danharrin

Critical

Learn more about advisories related to filamentphp/filament in the GitHub Advisory Database