Read the docs

Laravel

Records35All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

Laravel records in CISA KEV
TI-2025-33912 Laravel Livewire Code Injection Vulnerability Priority CRITICAL 99KEV 2026-03-20TI-2018-10827 Laravel Deserialization of Untrusted Data Vulnerability Priority CRITICAL 94KEV 2024-01-16TI-2021-02221 Laravel Ignition File Upload Vulnerability Priority CRITICAL 100KEV 2023-09-18

Components

Products in the NVD configurations · select one to filter the records
Laravel 10 records CRITICAL Framework 9 records HIGH Livewire 4 records CRITICAL Fortify 1 record LOW Passport 1 record LOW Pulse 1 record HIGH Reverb 1 record MEDIUM

Records

4 records in Livewire · all components

TI-2024-32090 CVE-2024-47823 · GHSA-f3cx-396f-7jqp

Livewire Remote Code Execution (RCE) on File Uploads

Priority HIGH 69

Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00846 Published 2024-10-08 Fixed in 3.5.2, 2.12.7 CWE-20
TI-2024-14261 CVE-2024-21504 · GHSA-389c-cf87-qmwj

Cross-site scripting in livewire/livewire

Priority MEDIUM 60

Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when a page uses [Url] for a property.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00516 Published 2024-03-19 Fixed in 3.4.9 CWE-79
Open these records in search →