PT-2026-45900 · Laravel · Laravel

Published 2026-06-03 · Updated 2026-06-08 · CVE-2026-48019

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Laravel (affected versions not specified)

Description A CRLF injection flaw allows for mail relay abuse, email hijacking, and header abuse. CRLF injection occurs when an attacker inserts Carriage Return (CR) and Line Feed (LF) characters into an input field, allowing them to split a single HTTP response or email header into multiple parts to inject malicious content.

Recommendations Apply the latest patch to resolve this issue.

Related Identifiers

CVE-2026-48019

Affected Products

Laravel

References · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48019 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-48019 · Vendor Advisory
• https://twitter.com/dailytechonx/status/2062585931400417650 · Twitter Post
• https://twitter.com/CyberEdition/status/2062444247513543084 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2061974898847736139 · Twitter Post
• https://twitter.com/omarxtream/status/2063911557403115523 · Twitter Post
• https://twitter.com/threadlinqs/status/2062390921212112973 · Twitter Post
• https://twitter.com/UndercodeNews/status/2062090109348966439 · Twitter Post