Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68
Laravel News reports: A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to…
Laravel News reports: A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0. The post Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox.
Key points
- Source: Laravel News
- Published: October 20, 2026
- Topics: Laravel, MySQL, APIs
Learn more on AgileLogics
Related articles
Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
TechCrunch – AI reports: OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
Run Large PlanetScale Queries in Laravel With DB::olap()
Laravel News reports: Laravel's new DB::olap() method runs PlanetScale and Vitess queries in OLAP mode to get past the 100,000 row limit, then switches the connection back. The post Run Large PlanetScale Queries in Laravel With DB::olap() appeared first on Laravel News. Join the Laravel Newsletter t…
BashBox: A Sandboxed Bash Interpreter for AI Agents in PHP
Laravel News reports: BashBox runs AI-generated bash scripts in pure PHP, with a virtual filesystem, execution limits, and opt-in network access. No exec or proc_open calls. The post BashBox: A Sandboxed Bash Interpreter for AI Agents in PHP appeared first on Laravel News. Join the Laravel Newslette…