CVE-2026-54493: Php Laravel Unvalidated Search Query

Request input is passed directly to search repository methods without type casting or empty checks, which can cause unhandled TypeErrors or unexpected query execution when parameters are omitted.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0PHP
greprules fetch cve-2026-54493-php-laravel-unvalidated-search-query --engine opengrep

Description

Request input is passed directly to search repository methods without type casting or empty checks, which can cause unhandled TypeErrors or unexpected query execution when parameters are omitted.