[CRITICAL] Laravel TokenGuard authentication bypass through non-string API credentials

PKSA-b41t-wbzk-9q51 CVE-2026-114509 GHSA-f9x3-7vq9-cph6

Affected package: laravel/framework

Affected version: <12.68.0|>=13.0.0,<13.29.0

Reported by:
GitHub