Login Request a demo
FR
Product
framework
by laravel · last CVE Oct 21, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities13In the news3Timeline
Severity mix
Critical 3High 4Medium 5Low 1
Severity
All severities13Critical3High4Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114508
New
6.5
0%
Oct 21
Laravel relationship inclusion can trigger unauthorized data destruction
Affected: >= 12.45.0, < 12.68.0; >= 13.0.0, < 13.27.0
CVE-2024-13919
6.1
1%
Mar 10
The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error…
Affected: 11.9.0 before 11.36.0
CVE-2024-13918
6.1
1%
Mar 10
The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode…
Affected: 11.9.0 before 11.36.0
CVE-2021-43808
6.1
1%
Dec 8
Laravel is a web application framework
Affected: before 6.20.42; 7.0.0 before 7.30.6; 8.0.0 before 8.75.0
CVE-2022-40482
5.3
1%
Apr 25
The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing
Affected: 8.0.0 before 8.83.24; 9.0.0 before 9.32.0
Showing 5