FI
Product
filament
14
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 8Low 2
Watch
Add filament to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77567 | 8.1 | Aug 24 | Filament: App-based MFA can be bypassed when recovery codes are enabled Affected: >= 4.0.0, < 4.12.0; >= 5.0.0, < 5.7.0 |
| CVE-2025-67507 | 8.1 | Dec 10 | Filament's multi-factor authentication (app) recovery codes can be used multiple times Affected: >= 4.0.0, < 4.3.1 |
| CVE-2026-55409 | 7.6 | Jun 22 | Filament: Disabled RichEditor field state can be used for XSS Affected: >= 3.0.0, < 3.3.53 |
| CVE-2026-48505 | 7.4 | Jun 22 | Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission Affected: >= 4.0.0, < 4.11.5; >= 5.0.0, < 5.6.5 |
Showing 4