CVE-2026-77759: Laravel Eloquent Orwhere Tenant Scope Bypasscve-2026-77759-laravel-eloquent-orwhere-tenant-scope-bypass
Chaining `orWhere` at the top level of a query that uses tenant scoping (`where('company_id', ...)`) can bypass multi-tenant isolation due to SQL operator precedence (AND before OR). Group OR conditions inside a closure `->where(function ($query) { ... })` instead.
