Threats tagged 'ghsa-63hm-g96r-2m2q'

CVE-2026-128083 is a low-severity vulnerability in the Laravel framework's concurrency task handling. It allows remote code execution if an application uses Concurrency::run() with user-controlled output that can forge internal result messages. This requires specific insecure coding patterns where user input is printed to stdout and can form a crafted JSON document. Fixed in Laravel versions 12.71.0 and 13.40.0.