Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-36340
8.1
HIGHCVSS v3
Published
April 30, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function
krayin/laravel-crm
GitHubFree & Opensource Laravel CRM solution for SMEs and Enterprises for complete customer lifecycle management.
GitHubFree & Opensource Laravel CRM solution for SMEs and Enterprises for complete customer lifecycle management.>= 2.1.5, < 2.1.6NVD