[MEDIUM] Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

PKSA-jm9c-w1fc-4m3p CVE-2026-48167 GHSA-3fc8-8hp6-6jr4

Affected version: >=5.0.0,<=5.6.4|>=4.0.0,<=4.11.4

Reported by:
GitHub

[MEDIUM] Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

PKSA-jyd3-2srm-pfqd CVE-2024-47186 GHSA-9h9q-qhxg-89xr

Affected version: >=3.0.0,<3.2.115

Reported by:
GitHub