Login Request a demo
LA
Product
Laravel
by Laravel · last CVE Apr 19, 2023
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 5Medium 3Low 0
Severity
All severities10Critical2High5Medium3Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Laravel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-15133
In wildKEV
8.1
77%
Aug 9
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value
Affected: through 5.5.40; 5.6.0 through 5.6.29
CVE-2022-2886
8.8
1%
Aug 19
A vulnerability, which was classified as critical, was found in Laravel 5.1
Affected: 5.1.0 through 5.1.46
CVE-2020-24941
7.5
1%
Sep 4
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0
Affected: before 6.18.35; 7.0.0 before 7.24.0
CVE-2020-24940
7.5
1%
Sep 4
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2
Affected: before 6.18.34; 7.0.0 before 7.23.2
CVE-2017-16894
7.5
87%
Nov 20
In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI
Affected: through 5.5.21
Showing 5