Login Request a demo
LA
Product
laravel-crm
by krayin · last CVE Oct 19, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 1High 5Medium 8Low 5
Severity
All severities19Critical1High5Medium8Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add laravel-crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41453
8.8
0%
Aug 3
Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter
Affected: before 2.2.4
CVE-2026-61460
8.8
1%
Jul 10
Krayin CRM Insecure Direct Object Reference via Controllers
Affected: through 2.2.3
CVE-2026-90944
8.2
1%
Sep 14
Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parse
Affected: through 2.2.6
CVE-2026-100885
7.3
1%
Sep 27
Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization
Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4
CVE-2026-112287
7.1
0%
Oct 19
Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module
Affected: before 2.2.7
Showing 5