Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Laravel — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Laravel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Laravel:frameworkreverbpulseLaravel Valetpassport
CVE IDTitleCVSSSeverityPublished
CVE-2026-39976 Laravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials Tokens — passportCWE-287 7.1 High2026-04-09
CVE-2026-23524 Laravel Redis Horizontal Scaling Insecure Deserialization — reverbCWE-502 9.8 Critical2026-01-21
CVE-2021-47756 Laravel Valet 2.0.3 - Local Privilege Escalation (macOS) — Laravel ValetCWE-732 8.4 High2026-01-15
CVE-2025-27515 Laravel has a File Validation Bypass — frameworkCWE-155 6.5 -2025-03-05
CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method — pulseCWE-94 8.8 -2024-12-13
CVE-2024-52301 Laravel allows environment manipulation via query string — frameworkCWE-88 6.5AIMediumAI2024-11-12
CVE-2024-50347 Laravel Reverb has Missing API Signature Verification — reverbCWE-347 5.3 -2024-10-31
CVE-2021-43808 Blade `@parent` Exploitation Leading To Possible XSS in Laravel — frameworkCWE-79 5.3 Medium2021-12-07
CVE-2021-21263 Query Binding Exploitation in Laravel — frameworkCWE-74 7.2 High2021-01-19

This page lists every published CVE security advisory associated with Laravel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.