
I would not leave a Filament v5 lock under 5.7 — app MFA with recovery codes was the hole
filament/filament ^5.0 resolves to v5.10.2 on Packagist as of 14 Oct 2026. CVE-2026-77567, the app-MFA bypass when recovery codes are on, was patched in 5.7.0, so a 5.0 tutorial lock is still the problem. Tables and forms are Livewire; I time that round trip before I blame the stylesheet.
Oct 14, 2026 · 9 min read