Laravel

Records35All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Laravel records in CISA KEV

TI-2025-33912 Laravel Livewire Code Injection Vulnerability CRITICAL 99KEV 2026-03-20 TI-2018-10827 Laravel Deserialization of Untrusted Data Vulnerability CRITICAL 94KEV 2024-01-16 TI-2021-02221 Laravel Ignition File Upload Vulnerability CRITICAL 100KEV 2023-09-18

Components

Products in the NVD configurations · select one to filter the records

Laravel 10 records CRITICAL Framework 9 records HIGH Livewire 4 records CRITICAL Fortify 1 record LOW Passport 1 record LOW Pulse 1 record HIGH Reverb 1 record MEDIUM

Records

1 record in Pulse · all components

TI-2024-36940 CVE-2024-55661 · GHSA-8vwh-pr89-4mw2

Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

HIGH 73

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.30649 Published 2024-12-13 Fixed in 1.3.1 CWE-94

Open these records in search →