FR
Product
framework
by laravel · last CVE Oct 21, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 4Medium 5Low 1
Watch

Add framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-27515
9.8
1%
Mar 5
Laravel has a File Validation Bypass
Affected: >= 12.0.0, < 12.1.1; < 11.44.1
CVE-2021-43617
9.8
20%
Nov 14
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for…
Affected: through 8.70.2
CVE-2026-114509
9.2
1%
Oct 21
Laravel TokenGuard authentication bypass through non-string API credentials
Affected: < 12.68.0; >= 13.0.0, < 13.29.0
Showing 3