venturedrake CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH venturedrake CVE published 2026-10-14

CVE-2026-110629

PatchSiren debrief for CVE-2026-110629. VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. This could lead to unauthorized modifications of deals, quotes, orders, and invoices. Defenders should assess exposure and prioritize patching to prevent potential security breaches. T [truncated]