Vulnerabilities in Laravel

9 results

Vexday analysis

Laravel apresenta baixo volume de vulnerabilidades conhecidas na base com apenas 1 CVE registrado, nenhum sob exploração ativa. A fragilidade identificada (CWE-732, permissões incorretas) não revela exposição crítica recente, refletindo postura de segurança estável para este fornecedor.

CVE-2024-52301HIGHLaravel allows environment manipulation via query stringEPSS 44.0%CVE-2024-55661HIGHLaravel Pulse Allows Remote Code Execution via Unprotected Query MethodEPSS 29.5%CVE-2021-21263HIGHQuery Binding Exploitation in LaravelEPSS 1.6%CVE-2026-23524CRITICALLaravel Redis Horizontal Scaling Insecure DeserializationEPSS 0.9%CVE-2021-43808MEDIUMBlade `@parent` Exploitation Leading To Possible XSS in LaravelEPSS 0.8%CVE-2025-27515MEDIUMLaravel has a File Validation BypassEPSS 0.7%CVE-2024-50347MEDIUMLaravel Reverb has Missing API Signature VerificationEPSS 0.3%CVE-2026-39976HIGHLaravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials TokensEPSS 0.3%CVE-2021-47756HIGHLaravel Valet 2.0.3 - Local Privilege Escalation (macOS)EPSS 0.2%