laravel/framework Security Advisories | GitStock

critical2026-10-23

Laravel TokenGuard authentication bypass through non-string API credentials

GHSA-f9x3-7vq9-cph6 · CVE-2026-114509

medium2026-10-23

Laravel relationship inclusion can trigger unauthorized data destruction

GHSA-5wcm-3v2w-8362 · CVE-2026-114508

low2026-09-29

Laravel: XSS in Debug Page Information

GHSA-jh5r-qr3c-85q8 · CVE-2026-102279

medium2026-06-17

Laravel Framework: Temporary Signed URL Path Confusion

GHSA-crmm-hgp2-wgrp

high2026-06-17

Laravel Framework: CRLF injection in default email rule

GHSA-5vg9-5847-vvmq

medium2025-03-10

Laravel framework susceptible to reflected cross-site scripting

GHSA-83wp-f5c3-hqqr · CVE-2024-13919

medium2025-03-10

Laravel framework susceptible to reflected cross-site scripting

GHSA-546h-56qp-8jmw · CVE-2024-13918

medium2025-03-05

Laravel has a File Validation Bypass

GHSA-78fx-h6xr-vch4 · CVE-2025-27515

high2024-11-12

Laravel environment manipulation via query string

GHSA-gv7v-rgg6-548h · CVE-2024-52301

high2024-05-15

laravel framework SQL Injection via limit and offset functions

GHSA-wq8p-mqvg-2p5h

high2024-05-15

laravel framework Unexpected database bindings via requests

GHSA-jwvj-pwww-3mj5

medium2024-05-15

Laravel Guard bypass in Eloquent models

GHSA-44pg-c29v-hp6r

critical2024-05-15

Laravel RCE vulnerability in "cookie" session driver

GHSA-qm5c-m76r-2hfr

medium2024-05-15

Laravel Cross-site Scripting (XSS) vulnerability in blade templating

GHSA-vr95-p7q6-8m9q

high2024-05-15

Laravel Cookie serialization vulnerability

GHSA-6jvx-8ch9-j2jr

medium2024-05-15

Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior

GHSA-7852-w36x-6mf6

medium2024-05-15

Laravel Hijacked authentication cookies vulnerability

GHSA-p62r-7637-3wwc

medium2024-05-15

Laravel Risk of mass-assignment vulnerabilities

GHSA-rj3w-99gc-8j58

critical2022-05-14

Laravel Framework Deserialization Vulnerability

GHSA-pfg4-p438-p874 · CVE-2019-9081

high2022-05-14

Laravel Framework RCE Vulnerability

GHSA-qvqm-h22r-4cp9 · CVE-2018-15133