Lookup for vulnerable packages by Package URL.
| Purl | pkg:composer/filament/tables@3.0.59 |
| Type | composer |
| Namespace | filament |
| Name | tables |
| Version | 3.0.59 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 3.2.115 |
| Latest_non_vulnerable_version | 5.3.5 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-usqf-xb5z-bbdn |
| vulnerability_id |
VCID-usqf-xb5z-bbdn |
| summary |
Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a color column or entry is rendered. Filament v3.2.115 fixes this issue. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-47186, GHSA-9h9q-qhxg-89xr
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-usqf-xb5z-bbdn |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:composer/filament/tables@3.0.59 |