Skip to content
OpenAdvisories

Package · Debian

php-laravel-framework

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-114508

    Laravel relationship inclusion can trigger unauthorized data destruction

    Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no w…

    laravel framework laravel/framework php-laravel-framework Debian Packagist
  • Medium 6.9
    CVE-2025-27515 Public exploit

    Laravel has a File Validation Bypass

    Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

    laravel framework laravel/framework php-laravel-framework Debian Packagist
  • Medium 5.3
    CVE-2022-40482

    The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration …

    php-laravel-framework Debian
  • Medium 5.3
    CVE-2021-43808

    Blade `@parent` Exploitation Leading To Possible XSS in Laravel

    Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another locati…

    laravel framework laravel/framework php-laravel-framework Debian Packagist