Skip to content
OpenAdvisories

Package · Packagist

laravel/reverb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-23524 Public exploit

    Laravel Redis Horizontal Scaling Insecure Deserialization

    Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiat…

    laravel reverb laravel/reverb Packagist