laravel Latest Vulnerabilities

Latest vulnerabilities published by laravel

JSON RSS CSV 🔔 Create Alert Trigger

14 August 2026

Authentication Bypass in Laravel Socialite's Facebook Provider by Laravel
CVE-2026-73683
LaravelSocialite9.2CRITICAL

3 June 2026

Cross-Site Scripting Vulnerability in Backpack CRUD for Laravel
CVE-2022-31114
Laravel-backpackCrud5.1MEDIUM

9 April 2026

Authentication Bypass Vulnerability in Laravel Passport OAuth2 Server
CVE-2026-39976
LaravelPassport7.1HIGH

27 January 2026

Denial of Service Vulnerability in Laravel Nova by Laravel
CVE-2020-36950
Laravel Holdings ...Laravel Nova👾🟡8.7HIGH

21 January 2026

Remote Code Execution Vulnerability in Laravel Reverb by Laravel
CVE-2026-23524
LaravelReverb👾🟡9.8CRITICAL

15 January 2026

Local Privilege Escalation in Laravel Valet by Laravel
CVE-2021-47756
LaravelLaravel Valet👾🟡8.4HIGH

10 March 2025

5 March 2025

Wildcard Validation Bypass in Laravel Framework
CVE-2025-27515
LaravelFramework👾🟡6.9MEDIUM

13 December 2024

Remote Code Execution Vulnerability in Laravel Pulse Monitoring Tool
CVE-2024-55661
LaravelLaravel PulseEPSS 29%

12 November 2024

Ignoring Arguments for Environment Detection
CVE-2024-52301
LaravelFramework👾🟡EPSS 44%📰

31 October 2024

Real-time WebSocket communication backend vulnerability
CVE-2024-50347
Laravel Reverb

16 April 2024

Remote Attack May Expose Database Credentials in Laravel Logs
CVE-2024-29291
Laravel Framework

1 February 2024

Cross-Site Request Forgery Vulnerability in Livewire by Laravel
CVE-2024-22859
LaravelLivewire8.8HIGH

22 June 2023

Local File Inclusion Vulnerability in Laravel-s by HHXsv5
CVE-2023-29931
Laravels ProjectLaravels9.8CRITICAL

25 April 2023

User Enumeration Vulnerability in Laravel Authentication Method
CVE-2022-40482
LaravelFramework5.3MEDIUM

19 April 2023

Deserialization Vulnerability in Laravel Framework by Laravel
CVE-2021-28254
LaravelLaravel9.8CRITICAL

27 February 2023

Arbitrary File Upload Vulnerability in Laravel-Admin by Laravel
CVE-2023-24249
Laravel-adminLaravel-admin7.2HIGH

24 February 2022

Authentication Vulnerability in Laravel Fortify by Laravel
CVE-2022-25838
LaravelFortify8.1HIGH

20 December 2021

OS Command Injection in Laravel Framework by Laravel
CVE-2020-19316
LaravelFramework8.8HIGH

8 December 2021

Blade `@parent` Exploitation Leading To Possible XSS in Laravel
CVE-2021-43808
LaravelFramework5.3MEDIUM

14 November 2021

Vulnerability in Laravel Framework Allows Unsafe PHP File Uploads
CVE-2021-43617
LaravelFramework👾🟡EPSS 19%9.8CRITICAL

19 January 2021

Query Binding Exploitation in Laravel
CVE-2021-21263
LaravelFramework7.2HIGH

4 September 2020