Open-source package vulnerability · Composer (PHP)
CVE-2025-27517: Volt Allows RCE Via User-Crafted Requests
criticalCVSS 4.0 9.3GHSA-v69f-5jxm-hwvv
Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components.
Published Mar 5, 2025
Affected packages
livewire/volt
- Ecosystem
- Composer (PHP)
- Affected
- < 1.7.0
- Fixed in
- 1.7.0
- Check
composer show livewire/volt
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components.
Credited to angelej.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology