{"uuid": "76074f89-667e-42c0-aa02-3530f3093322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117236485519105661", "content": "CVE-2026-48019: CRLF injection in Laravel (<12.60.0, <13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:07.322014Z"}