https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T07:07:12.731482+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-114508 CVE-2026-114508 — Laravel relationship inclusion can trigger unauthorized data destruction 2026-10-24T07:07:12.732436+00:00

Affected: laravel framework

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0.