Vulnerabilities

TI-2026-39923 CVE-2026-55250

Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches

MEDIUM 45

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00869 Published 2026-09-08 Fixed in 10.74.0 CWE-294

TI-2026-38904 CVE-2026-53933

Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing

LOW 37

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00538 Published 2026-09-08 Fixed in 10.73.1 CWE-203

Vulnerabilities

Filters

Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches

Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing