Vulnerabilities in Laravel
14 resultsCVE-2024-52301HIGHLaravel allows environment manipulation via query stringEPSS 44.8%CVE-2024-55661HIGHLaravel Pulse Allows Remote Code Execution via Unprotected Query MethodEPSS 30.6%CVE-2026-114509CRITICALLaravel TokenGuard authentication bypass through non-string API credentialsEPSS 1.8%CVE-2021-21263HIGHQuery Binding Exploitation in LaravelEPSS 1.6%CVE-2026-23524CRITICALLaravel Redis Horizontal Scaling Insecure DeserializationEPSS 1.0%CVE-2021-43808MEDIUMBlade `@parent` Exploitation Leading To Possible XSS in LaravelEPSS 0.8%CVE-2026-73683CRITICALLaravel Socialite Facebook Provider Authentication Bypass via Nonce ReplayEPSS 0.8%CVE-2025-27515MEDIUMLaravel has a File Validation BypassEPSS 0.7%CVE-2026-48019HIGHCRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relayEPSS 0.5%CVE-2026-114508MEDIUMLaravel relationship inclusion can trigger unauthorized data destructionEPSS 0.4%CVE-2024-50347MEDIUMLaravel Reverb has Missing API Signature VerificationEPSS 0.3%CVE-2026-39976HIGHLaravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials TokensEPSS 0.3%CVE-2026-102279LOWLaravel: XSS in Debug Page InformationEPSS 0.3%CVE-2021-47756HIGHLaravel Valet 2.0.3 - Local Privilege Escalation (macOS)EPSS 0.2%