laravel/framework vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-CRMM-HGP2-WGRPMediumlaravel/framework: Laravel Framework: Temporary Signed URL Path Confusion GHSA-5VG9-5847-VVMQHighlaravel/framework: Laravel Framework: CRLF injection in default email rule CVE-2024-13918Mediumlaravel/framework: Laravel framework susceptible to reflected cross-site scripting CVE-2024-13919Mediumlaravel/framework: Laravel framework susceptible to reflected cross-site scripting CVE-2025-27515Mediumlaravel/framework: Laravel has a File Validation Bypass CVE-2024-52301Highlaravel/framework: Laravel environment manipulation via query string GHSA-WQ8P-MQVG-2P5HHighlaravel/framework: laravel framework SQL Injection via limit and offset functions GHSA-JWVJ-PWWW-3MJ5Highlaravel/framework: laravel framework Unexpected database bindings via requests GHSA-44PG-C29V-HP6RMediumlaravel/framework: Laravel Guard bypass in Eloquent models GHSA-QM5C-M76R-2HFRCriticallaravel/framework: Laravel RCE vulnerability in "cookie" session driver GHSA-VR95-P7Q6-8M9QMediumlaravel/framework: Laravel Cross-site Scripting (XSS) vulnerability in blade templating GHSA-6JVX-8CH9-J2JRHighlaravel/framework: Laravel Cookie serialization vulnerability GHSA-7852-W36X-6MF6Mediumlaravel/framework: Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior GHSA-P62R-7637-3WWCMediumlaravel/framework: Laravel Hijacked authentication cookies vulnerability GHSA-RJ3W-99GC-8J58Mediumlaravel/framework: Laravel Risk of mass-assignment vulnerabilities CVE-2017-9303Mediumlaravel/laravel: Laravel does not properly constrain the host portion of a password-reset URL CVE-2017-14775Mediumlaravel/framework: Laravel Sensitive Data Exposure CVE-2019-9081Criticallaravel/framework: Laravel Framework Deserialization Vulnerability CVE-2018-15133Highlaravel/framework: Laravel Framework RCE Vulnerability CVE-2020-19316Highlaravel/framework: OS Command Injection in Laravel Framework CVE-2021-43808Mediumlaravel/framework: Laravel Framework XSS in Blade templating engine CVE-2020-24941Highlaravel/framework: Improper Input Validation in Laravel GHSA-4MG9-VHXQ-VM7JHighlaravel/framework: SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database GHSA-X7P5-P2C9-PHVGHighlaravel/framework: Unexpected database bindings CVE-2021-21263Highlaravel/framework: Query Binding Exploitation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo