{"uuid": "616a7ff5-e66c-4dcc-90c5-666c2b03d6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzipahvzt2z", "content": "CVE-2026-48019: CRLF injection in Laravel (&lt;12.60.0, &lt;13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:03.818515Z"}