CVE-2026-77780: Laravel Eloquent Orwhere Scope Bypasscve-2026-77780-laravel-eloquent-orwhere-scope-bypass
Chaining `where()` conditions directly with `orWhere()` at the top query level causes logical operator precedence issues (`WHERE A AND B OR C` evaluates to `(A AND B) OR C`), which can bypass preceding tenant or authorization filters. Group OR conditions inside a `where(function ($query) { ... })` closure instead.
