Login Request a demo
FR
Product
framework
by laravel · last CVE Oct 21, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities14In the news3Timeline
Severity mix
Critical 3High 4Medium 5Low 1
Severity
All severities14Critical3High4Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114508
6.5
0%
Oct 21
Laravel relationship inclusion can trigger unauthorized data destruction
Affected: >= 12.45.0, < 12.68.0; >= 13.0.0, < 13.27.0
CVE-2024-13919
6.1
1%
Mar 10
Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page
Affected: 11.9.0 before 11.36.0
CVE-2024-13918
6.1
1%
Mar 10
Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page
Affected: 11.9.0 before 11.36.0
CVE-2021-43808
6.1
1%
Dec 8
Laravel is a web application framework
Affected: before 6.20.42; 7.0.0 before 7.30.6; 8.0.0 before 8.75.0
CVE-2022-40482
5.3
1%
Apr 25
The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing
Affected: 8.0.0 before 8.83.24; 9.0.0 before 9.32.0
Showing 5