Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-jh5r-qr3c-85q8
  • Packagist/laravel/framework
 Laravel: XSS in Debug Page Information 29 Sep
  • Fix available
  • Severity - 3.1 (Low)
GHSA-crmm-hgp2-wgrp
  • Packagist/laravel/framework
 Laravel Framework: Temporary Signed URL Path Confusion 17 Jun
  • Fix available
  • Severity - 4.2 (Medium)
GHSA-5vg9-5847-vvmq
  • Packagist/laravel/framework
 Laravel Framework: CRLF injection in default email rule 17 Jun
  • Fix available
  • Severity - 8.9 (High)
GHSA-546h-56qp-8jmw
  • Packagist/laravel/framework
 Laravel framework susceptible to reflected cross-site scripting 10 Mar 2025
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-83wp-f5c3-hqqr
  • Packagist/laravel/framework
 Laravel framework susceptible to reflected cross-site scripting 10 Mar 2025
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-78fx-h6xr-vch4
  • Packagist/laravel/framework
 Laravel has a File Validation Bypass 05 Mar 2025
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-gv7v-rgg6-548h
  • Packagist/laravel/framework
 Laravel environment manipulation via query string 12 Nov 2024
  • Fix available
  • Severity - 8.7 (High)
GHSA-wq8p-mqvg-2p5h
  • Packagist/laravel/framework
 laravel framework SQL Injection via limit and offset functions 15 May 2024
  • Fix available
GHSA-jwvj-pwww-3mj5
  • Packagist/laravel/framework
 laravel framework Unexpected database bindings via requests 15 May 2024
  • Fix available
GHSA-44pg-c29v-hp6r
  • Packagist/laravel/framework
 Laravel Guard bypass in Eloquent models 15 May 2024
  • Fix available
GHSA-qm5c-m76r-2hfr
  • Packagist/laravel/framework
 Laravel RCE vulnerability in "cookie" session driver 15 May 2024
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-vr95-p7q6-8m9q
  • Packagist/laravel/framework
 Laravel Cross-site Scripting (XSS) vulnerability in blade templating 15 May 2024
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-6jvx-8ch9-j2jr
  • Packagist/laravel/framework
 Laravel Cookie serialization vulnerability 15 May 2024
  • Fix available
GHSA-7852-w36x-6mf6
  • Packagist/laravel/framework
 Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 15 May 2024
  • Fix available
GHSA-p62r-7637-3wwc
  • Packagist/laravel/framework
 Laravel Hijacked authentication cookies vulnerability 15 May 2024
  • Fix available
GHSA-rj3w-99gc-8j58
  • Packagist/laravel/framework
 Laravel Risk of mass-assignment vulnerabilities 15 May 2024
  • Fix available
Load more...