cms

v5.73.24 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1d API Development

✓ No known CVEs patched

This release patches 1 known CVE

Topics

api-rest cms composer-package content-management-system flat-file-cms flatfile

+12 more

flatfilecms graphql headless jamstack laravel laravel-cms laravel-package php php8 ssg statamic vuejs

Summary

AI summary

Fixed CSV export formula escaping, hardened remote URL validation, and resolved Bard/Link Blink cache type collisions.

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	Fixes formula character escaping in CSV exports during form submission. Fixes formula character escaping in CSV exports during form submission. Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Fixes cache type collision between Bard and Link Blink. Fixes cache type collision between Bard and Link Blink. Source: llm_adapter@2026-06-02 Confidence: high	—
Bugfix	Medium	Hardens remote URL validation logic. Hardens remote URL validation logic. Source: llm_adapter@2026-06-02 Confidence: low	—

Full changelog

Harden remote URL validation — mitigates potential injection or malicious URL exploitation

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track cms

Get notified when new releases ship.

About cms

The core Laravel CMS Composer package