A critical Laravel authentication bypass (CVSS 9.2) in TokenGuard enables account takeover without a token. Upgrade to 13.29.0 or 12.68.0.

#Laravel #PHP #AuthenticationBypass #AccountTakeover #WebSecurity #OpenSource #PatchNow #CyberSecurity

https://securityonline.info/laravel-authentication-bypass-tokenguard/?utm_source=mastodon&utm_medium=jetpack_social