Login Request a demo
LA
Product
laradashboard
by laradashboard · last CVE Oct 3, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 2High 6Medium 5Low 2
Severity
All severities15Critical2High6Medium5Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add laradashboard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105129
6.5
0%
Oct 3
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
Affected: before 1.4.8
CVE-2026-105128
5.4
0%
Oct 3
LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
Affected: before 1.4.8
CVE-2026-90931
5.4
0%
Sep 14
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
Affected: 0.9.0 through 1.4.2
CVE-2026-86436
5.4
1%
Sep 7
Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints
Affected: before 1.3.2
CVE-2026-105127
5.3
1%
Oct 3
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
Affected: 1.4.2 before 1.4.8
Showing 5