Skip to content
OpenAdvisories

Vendor

laravel

15 known vulnerabilities.

Products

framework 8 reverb 2 pulse 2 Laravel Valet 1 Socialite 1 passport 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-114509 Public exploit Scanner template

    Laravel TokenGuard authentication bypass through non-string API credentials

    Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can matc…

    laravel framework laravel/framework php-laravel-framework Debian Packagist
  • Critical 9.8
    CVE-2026-23524 Public exploit

    Laravel Redis Horizontal Scaling Insecure Deserialization

    Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiat…

    laravel reverb laravel/reverb Packagist