Skip to content
OpenAdvisories

Package · Packagist

laravel/reverb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2026-23524 Public exploit

    Laravel Redis Horizontal Scaling Insecure Deserialization

    Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiat…

    laravel reverb laravel/reverb Packagist
  • Medium 6.3
    CVE-2024-50347

    Laravel Reverb has Missing API Signature Verification

    Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. Prior to 1.4.0, there is an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scen…

    laravel reverb laravel/reverb Packagist