Login Request a demo
FR
Product
framework
by laravel · last CVE Oct 21, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities13In the news3Timeline
Severity mix
Critical 3High 4Medium 5Low 1
Severity
All severities13Critical3High4Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48019
8.9
1%
Sep 4
CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay
Affected: >= 13.0.0, < 13.10.0; < 12.60.0
CVE-2020-19316
8.8
3%
Dec 20
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17
Affected: before 5.8.17
CVE-2018-6330
8.8
2%
Mar 28
Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters
Affected: 5.4.15
CVE-2024-52301
7.5
45%
Nov 12
Laravel is a web application framework
Affected: before 6.20.45; 7.0.0 before 7.30.7; 8.0.0 before 8.83.28; 9.0.0 before 9.52.17; 10.0.0 before 10.48.23; 11.0.0 before 11.31.0
Showing 4