Laravel

Records35All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Laravel records in CISA KEV

TI-2025-33912 Laravel Livewire Code Injection Vulnerability CRITICAL 99KEV 2026-03-20 TI-2018-10827 Laravel Deserialization of Untrusted Data Vulnerability CRITICAL 94KEV 2024-01-16 TI-2021-02221 Laravel Ignition File Upload Vulnerability CRITICAL 100KEV 2023-09-18

Components

Products in the NVD configurations · select one to filter the records

Laravel 10 records CRITICAL Framework 9 records HIGH Livewire 4 records CRITICAL Fortify 1 record LOW Passport 1 record LOW Pulse 1 record HIGH Reverb 1 record MEDIUM

Records

1 record in Fortify · all components

TI-2022-09407 CVE-2022-25838 · GHSA-6w4v-qr4m-97gg

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into…

LOW 37

Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00946 Published 2022-02-24 Fixed in 1.11.1 CWE-294

Open these records in search →