All issues

Search results

Taint Analysis: TaintedHtml on response()->make() when literal $headers declare a non-HTML Content-Type

false-positive

taint-analysisTaint analysis coverage and annotationsTaint analysis coverage and annotations

Status: Open.

#1345 In psalm/psalm-plugin-laravel;

· alies-dev opened on Aug 7, 2026

where() array strip: template intersection receiver (T&Builder) still reports TaintedSql

Status: Open.

#1339 In psalm/psalm-plugin-laravel;

· alies-dev opened on Jul 30, 2026

Instance-path where() array strip trusts inheritance: a Builder subclass overriding where() with raw SQL is silenced

Status: Open.

#1337 In psalm/psalm-plugin-laravel;

· alies-dev opened on Jul 30, 2026

Validated input should be considered as safe

Status: Open.

Bug

#1335 In psalm/psalm-plugin-laravel;

· Seb33300 opened on Jul 30, 2026

Detect LLM prompt-injection & unsafe AI output (laravel/ai taint analysis)

taint-analysisTaint analysis coverage and annotationsTaint analysis coverage and annotations

umbrellaTracking issue grouping related child issuesTracking issue grouping related child issues

Status: Open.

Feature

#484 In psalm/psalm-plugin-laravel;

· alies-dev opened on Mar 19, 2026