Read the docs

Laravel-Backpack

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Laravel-Backpack records in CISA KEV

No Laravel-Backpack vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2026-39082 CVE-2026-54178 · GHSA-8xjm-wqrp-2f25

Path traversal in Laravel-Backpack CRUD

Priority LOW 36

backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00562 Published 2026-09-14 Fixed in 6.8.12, 7.0.35 CWE-22
TI-2026-39081 CVE-2026-54177 · GHSA-8q2w-pv9p-mjvc

Unrestricted file upload in Laravel-Backpack CRUD

Priority LOW 33

backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0093 Published 2026-09-14 Fixed in 6.8.14, 7.0.38 CWE-434
TI-2022-13158 CVE-2022-31114 · GHSA-m8xx-3x29-84h8

backpack/crud Vulnerable to Cross-site Scripting

Priority LOW 23

backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00303 Published 2026-06-03 Fixed in 5.0.13, 4.1.69 +1 CWE-79
TI-2026-39083 CVE-2026-54179 · GHSA-8hw4-7qjr-3wxg

Unrestricted file upload in Laravel-Backpack CRUD

Priority LOW 20

backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00261 Published 2026-08-31 Fixed in 6.8.14, 7.0.38 CWE-434
Open these records in search →