PKSA-g5js-3ypd-k2kr Security Advisory
-
[CRITICAL] Livewire is vulnerable to remote command execution during component property update hydration
PKSA-g5js-3ypd-k2kr CVE-2025-54068 GHSA-29cq-5w36-x7w3
Affected package: livewire/livewire
Affected version: >=3.0.0-beta.1,<3.6.4
Reported by:
GitHub