Login Request a demo
FR
Product
framework
by laravel · last CVE Oct 21, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities14In the news3Timeline
Severity mix
Critical 3High 4Medium 5Low 1
Severity
All severities14Critical3High4Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48019
8.9
1%
Sep 4
CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay
Affected: >= 13.0.0, < 13.10.0; < 12.60.0
CVE-2020-19316
8.8
3%
Dec 20
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17
Affected: before 5.8.17
CVE-2018-6330
8.8
2%
Mar 28
Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters
Affected: 5.4.15
CVE-2024-52301
7.5
45%
Nov 12
Laravel allows environment manipulation via query string
Affected: < 6.20.45; >= 7.0.0, < 7.30.7; >= 8.0.0, < 8.83.28; >= 9.0.0, < 9.52.17; >= 10.0.0, < 10.48.23; >= 11.0.0, < 11.31.0
Showing 4