Laravel vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
107 matching records
- Critical9.1alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.95%Dec 4, 2025
- Medium6.5alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.Check if you run itEPSS 0.55%Dec 3, 2025
- High8.1alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.40%Nov 6, 2025
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.30%Oct 30, 2025
- Medium5.4Sharp is a content management framework built for Laravel as a package.Check if you run itEPSS 0.22%Oct 28, 2025
- High8.8alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload.Check if you run itEPSS 0.60%Oct 28, 2025
- Medium6.9Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.28%Oct 16, 2025
- Medium6.9Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.28%Oct 16, 2025
- Medium6.9Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.28%Oct 16, 2025
- Medium5.1Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.40%Oct 16, 2025
- High7.1Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.39%Oct 16, 2025
- Low3.3auth0-PHP is an SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.35%Oct 1, 2025
- High8.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.72%Sep 3, 2025
- Low2.5UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.63%Aug 22, 2025
- High8.1UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.44%Aug 22, 2025
- Medium6.9UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.15%Aug 21, 2025
- High7.3UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.48%Aug 21, 2025
- High8.0UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.Check if you run itEPSS 0.39%Aug 21, 2025
- High8.6FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework).Check if you run itEPSS 1.13%Jul 26, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 96.28%Jul 17, 2025
- Critical10.0A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint.Check if you run itEPSS 0.80%Jul 1, 2025
- Medium6.0Laravel Translation Manager is a package to manage Laravel translation files.Check if you run itEPSS 0.42%Jun 9, 2025
- UnknownLaravel Laravel Framework Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Patch nowKEVEPSS 44.76%Jun 8, 2025
- Medium6.6Laravel Rest Api is an API generator.Check if you run itEPSS 0.64%May 30, 2025
- Unknownthecontrolgroup voyager Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 1.22%Apr 29, 2025