Laravel security vulnerabilities
Developer framework / library. Public CVE monitoring for Laravel. Vendor security advisories are linked on this page.
Built for Operators of this product.
105 public records · 0 security-fix timeline events. 1 published in the last 7 days. 39 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 2
- High 0
- Medium 1
- Low 0
2026-08-043 issues2026-11-01
Known exploited
View all known exploited- Critical9.2Laravel is a web application framework.Patch nowKEVEPSS 0.78%Oct 21, 2026
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- High8.1Laravel Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 76.57%Aug 9, 2018
- Critical9.8Laravel Ignition File Upload VulnerabilityPatch nowKEVEPSS 99.94%Jan 12, 2021
Recently published
Browse catalog- Medium6.5Laravel is a web application framework.Check if you run itEPSS 0.41%Oct 21, 2026
- Critical9.2Laravel is a web application framework.Patch nowKEVEPSS 0.78%Oct 21, 2026
- Critical9.1The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passCheck if you run itEPSS 0.19%Oct 4, 2026
- High8.7Krayin CRM Insecure Direct Object Reference via ControllersCheck if you run itEPSS 0.51%Jul 10, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Medium4.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.15%May 29, 2026
- Medium4.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.15%May 29, 2026
- High8.7Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer().Check if you run itEPSS 0.44%May 29, 2026
- High7.5FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.14%May 29, 2026
- Medium5.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.21%May 29, 2026