Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-128083 (GCVE-0-2026-128083)

Vulnerability from nvd – Published: 2026-11-13 18:44 – Updated: 2026-11-13 18:44

Title

Laravel: Task Output Injection - Concurrency Process

Summary

Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel's Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child's standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/62297	x_refsource_MISC
https://github.com/laravel/framework/commit/0f904…	x_refsource_MISC
https://github.com/laravel/framework/commit/c3713…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 13.0.0, < 13.40.0 Affected: < 12.71.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.40.0"
            },
            {
              "status": "affected",
              "version": "\u003c 12.71.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel\u0027s Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child\u0027s standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T18:44:40.992Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q"
        },
        {
          "name": "https://github.com/laravel/framework/pull/62297",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/62297"
        },
        {
          "name": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c"
        },
        {
          "name": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.71.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.71.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.40.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.40.0"
        }
      ],
      "source": {
        "advisory": "GHSA-63hm-g96r-2m2q",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel: Task Output Injection - Concurrency Process"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-128083",
    "datePublished": "2026-11-13T18:44:40.992Z",
    "dateReserved": "2026-11-12T21:24:51.130Z",
    "dateUpdated": "2026-11-13T18:44:40.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114509 (GCVE-0-2026-114509)

Vulnerability from nvd – Published: 2026-10-21 21:49 – Updated: 2026-10-28 18:32

Previdian

Title

Laravel TokenGuard authentication bypass through non-string API credentials

Summary

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-28 18:32 UTC

CWE

CWE-287 - Improper Authentication
CWE-1287 - Improper Validation of Specified Type of Input

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/commit/8dbb0…	x_refsource_MISC
https://github.com/laravel/framework/commit/9b21c…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: < 12.68.0 Affected: >= 13.0.0, < 13.29.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-114509",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-28T18:32:04.286628Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-28T18:32:28.863Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 12.68.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.29.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1287",
              "description": "CWE-1287: Improper Validation of Specified Type of Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T21:49:29.486Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6"
        },
        {
          "name": "https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5"
        },
        {
          "name": "https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.68.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.68.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.29.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.29.0"
        }
      ],
      "source": {
        "advisory": "GHSA-f9x3-7vq9-cph6",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel TokenGuard authentication bypass through non-string API credentials"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-114509",
    "datePublished": "2026-10-21T21:49:29.486Z",
    "dateReserved": "2026-10-21T16:15:06.492Z",
    "dateUpdated": "2026-10-28T18:32:28.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114508 (GCVE-0-2026-114508)

Vulnerability from nvd – Published: 2026-10-21 21:45 – Updated: 2026-10-23 21:18

Title

Laravel relationship inclusion can trigger unauthorized data destruction

Summary

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-23 17:32 UTC

CWE

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/61322	x_refsource_MISC
https://github.com/laravel/framework/pull/61323	x_refsource_MISC
https://github.com/laravel/framework/commit/50a79…	x_refsource_MISC
https://github.com/laravel/framework/commit/b89f2…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 12.45.0, < 12.68.0 Affected: >= 13.0.0, < 13.27.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-114508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-23T17:32:51.979205Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-23T21:18:11.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 12.45.0, \u003c 12.68.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.27.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-470",
              "description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T21:45:31.465Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61322",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61322"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61323",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61323"
        },
        {
          "name": "https://github.com/laravel/framework/commit/50a7970efe9f9990b6ec4f1e949de2abaaf4263e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/50a7970efe9f9990b6ec4f1e949de2abaaf4263e"
        },
        {
          "name": "https://github.com/laravel/framework/commit/b89f2944995d555bfda76dced1ef6c6b04ef17d8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/b89f2944995d555bfda76dced1ef6c6b04ef17d8"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.68.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.68.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.27.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.27.0"
        }
      ],
      "source": {
        "advisory": "GHSA-5wcm-3v2w-8362",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel relationship inclusion can trigger unauthorized data destruction"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-114508",
    "datePublished": "2026-10-21T21:45:31.465Z",
    "dateReserved": "2026-10-21T16:15:06.492Z",
    "dateUpdated": "2026-10-23T21:18:11.415Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102279 (GCVE-0-2026-102279)

Vulnerability from nvd – Published: 2026-09-28 20:59 – Updated: 2026-09-29 14:44

Title

Laravel: XSS in Debug Page Information

Summary

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is fixed in versions 12.69.0 and 13.30.0.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 14:43 UTC

CWE

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/61381	x_refsource_MISC
https://github.com/laravel/framework/commit/b495c…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: < 12.69.0 Affected: >= 13.0.0, < 13.30.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102279",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T14:43:55.430439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T14:44:03.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 12.69.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.30.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is fixed in versions 12.69.0 and 13.30.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:59:36.528Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-jh5r-qr3c-85q8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-jh5r-qr3c-85q8"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61381",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61381"
        },
        {
          "name": "https://github.com/laravel/framework/commit/b495ca2ec4e15a977e8700328bf13e8a79f29d12",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/b495ca2ec4e15a977e8700328bf13e8a79f29d12"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.69.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.69.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.30.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.30.0"
        }
      ],
      "source": {
        "advisory": "GHSA-jh5r-qr3c-85q8",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel: XSS in Debug Page Information"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102279",
    "datePublished": "2026-09-28T20:59:36.528Z",
    "dateReserved": "2026-09-28T20:11:16.659Z",
    "dateUpdated": "2026-09-29T14:44:03.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-48019 (GCVE-0-2026-48019)

Vulnerability from nvd – Published: 2026-09-04 22:11 – Updated: 2026-09-08 13:01

Title

CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Summary

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0.

Severity

8.9 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-08 13:01 UTC

CWE

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/60151	x_refsource_MISC
https://github.com/laravel/framework/commit/96e9a…	x_refsource_MISC
https://github.com/laravel/framework/commit/f336b…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 13.0.0, < 13.10.0 Affected: < 12.60.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-48019",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-08T13:01:14.091808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T13:01:38.157Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.10.0"
            },
            {
              "status": "affected",
              "version": "\u003c 12.60.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel\u0027s email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-93",
              "description": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T22:11:40.811Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq"
        },
        {
          "name": "https://github.com/laravel/framework/pull/60151",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/60151"
        },
        {
          "name": "https://github.com/laravel/framework/commit/96e9a663db657cf37ef26cd794fda8ff60eaa451",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/96e9a663db657cf37ef26cd794fda8ff60eaa451"
        },
        {
          "name": "https://github.com/laravel/framework/commit/f336ba79e744257f84ebf0d096b0ebc62e8e1a4d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/f336ba79e744257f84ebf0d096b0ebc62e8e1a4d"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.60.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.60.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.10.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.10.0"
        }
      ],
      "source": {
        "advisory": "GHSA-fpqx-6722-p65v",
        "discovery": "UNKNOWN"
      },
      "title": "CRLF injection in Laravel\u0027s default email rule enables SMTP smuggling and spoofed-mail relay"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-48019",
    "datePublished": "2026-09-04T22:11:40.811Z",
    "dateReserved": "2026-05-20T17:44:09.587Z",
    "dateUpdated": "2026-09-08T13:01:38.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73683 (GCVE-0-2026-73683)

Vulnerability from nvd – Published: 2026-08-14 21:32 – Updated: 2026-11-08 14:08

Title

Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Summary

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function within FacebookProvider.php. Attackers who obtain a valid, unexpired id_token issued for the same Facebook App ID can submit the captured token to the backend userFromToken() endpoint, bypassing authentication controls because signature, aud, and iss checks pass while no session-bound nonce comparison is performed, resulting in unauthorized access to victim accounts.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 02:16 UTC

CWE

CWE-294 - Authentication Bypass by Capture-replay

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8186 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/laravel/socialite/pull/789	productpatch
https://github.com/laravel/socialite/commit/caf71…	patch
https://github.com/laravel/socialite	vendor-advisory
https://www.vulncheck.com/advisories/laravel-soci…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
Laravel	Socialite	Affected: 0 , < 5.29.0 (semver)

Date Public

2026-08-06 00:00

Credits

Shion Takabe (GitHub: meihao550)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73683",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T02:16:49.436257Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T02:16:58.252Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Socialite",
          "vendor": "Laravel",
          "versions": [
            {
              "lessThan": "5.29.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shion Takabe (GitHub: meihao550)"
        }
      ],
      "datePublic": "2026-08-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Socialite\u0027s Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function within FacebookProvider.php. Attackers who obtain a valid, unexpired id_token issued for the same Facebook App ID can submit the captured token to the backend userFromToken() endpoint, bypassing authentication controls because signature, aud, and iss checks pass while no session-bound nonce comparison is performed, resulting in unauthorized access to victim accounts."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-294",
              "description": "Authentication Bypass by Capture-replay",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T14:08:47.738Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Pull Request",
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://github.com/laravel/socialite/pull/789"
        },
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/laravel/socialite/commit/caf714f55d51ab0d914b40033d8b0f489d6219cc"
        },
        {
          "name": "Product Repository",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/laravel/socialite"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laravel-socialite-facebook-provider-authentication-bypass-via-nonce-replay"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-73683",
    "datePublished": "2026-08-14T21:32:18.055Z",
    "dateReserved": "2026-08-13T15:15:35.896Z",
    "dateUpdated": "2026-11-08T14:08:47.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39976 (GCVE-0-2026-39976)

Vulnerability from nvd – Published: 2026-04-09 16:50 – Updated: 2026-04-09 19:31

Title

Laravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials Tokens

Summary

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier (since there's no user). The token guard then passes this value to retrieveById() without validating it's actually a user identifier, potentially resolving an unrelated real user. Any machine-to-machine token can inadvertently authenticate as an actual user. This vulnerability is fixed in 13.7.1.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-09 17:38 UTC

CWE

CWE-287 - Improper Authentication

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/passport/security/advi…	x_refsource_CONFIRM
https://github.com/laravel/passport/issues/1900	x_refsource_MISC
https://github.com/thephpleague/oauth2-server/iss…	x_refsource_MISC
https://github.com/laravel/passport/pull/1901	x_refsource_MISC
https://github.com/laravel/passport/pull/1902	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	passport	Affected: >= 13.0.0, < 13.7.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-39976",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-09T17:38:00.854614Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-09T19:31:53.801Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "passport",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.7.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier (since there\u0027s no user). The token guard then passes this value to retrieveById() without validating it\u0027s actually a user identifier, potentially resolving an unrelated real user. Any machine-to-machine token can inadvertently authenticate as an actual user. This vulnerability is fixed in 13.7.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-09T16:50:42.326Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/passport/security/advisories/GHSA-349c-2h2f-mxf6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/passport/security/advisories/GHSA-349c-2h2f-mxf6"
        },
        {
          "name": "https://github.com/laravel/passport/issues/1900",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/issues/1900"
        },
        {
          "name": "https://github.com/thephpleague/oauth2-server/issues/1456#issuecomment-2734989996",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/thephpleague/oauth2-server/issues/1456#issuecomment-2734989996"
        },
        {
          "name": "https://github.com/laravel/passport/pull/1901",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/pull/1901"
        },
        {
          "name": "https://github.com/laravel/passport/pull/1902",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/pull/1902"
        }
      ],
      "source": {
        "advisory": "GHSA-349c-2h2f-mxf6",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Passport\u0027s TokenGuard Authenticates Unrelated User for Client Credentials Tokens"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-39976",
    "datePublished": "2026-04-09T16:50:42.326Z",
    "dateReserved": "2026-04-08T00:01:47.628Z",
    "dateUpdated": "2026-04-09T19:31:53.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23524 (GCVE-0-2026-23524)

Vulnerability from nvd – Published: 2026-01-21 22:07 – Updated: 2026-01-22 16:49

Title

Laravel Redis Horizontal Scaling Insecure Deserialization

Summary

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiated, which leaves users vulnerable to Remote Code Execution. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication, but only affects Laravel Reverb when horizontal scaling is enabled (REVERB_SCALING_ENABLED=true). This issue has been fixed in version 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set REVERB_SCALING_ENABLED=false to bypass the vulnerable logic entirely (if the environment uses only one Reverb node).

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-22 15:13 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/reverb/security/adviso…	x_refsource_CONFIRM
https://github.com/laravel/reverb/commit/9ec26f8f…	x_refsource_MISC
https://cwe.mitre.org/data/definitions/502.html	x_refsource_MISC
https://github.com/laravel/reverb/releases/tag/v1.7.0	x_refsource_MISC
https://laravel.com/docs/12.x/reverb#scaling	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	reverb	Affected: < 1.7.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-23524",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-22T15:13:34.417400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-22T16:49:37.182Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "reverb",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.7.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP\u2019s unserialize() function without restricting which classes can be instantiated, which leaves users vulnerable to Remote Code Execution. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication, but only affects Laravel Reverb when horizontal scaling is enabled (REVERB_SCALING_ENABLED=true). This issue has been fixed in version 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set REVERB_SCALING_ENABLED=false to bypass the vulnerable logic entirely (if the environment uses only one Reverb node)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-21T22:07:55.682Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/reverb/security/advisories/GHSA-m27r-m6rx-mhm4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/reverb/security/advisories/GHSA-m27r-m6rx-mhm4"
        },
        {
          "name": "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a"
        },
        {
          "name": "https://cwe.mitre.org/data/definitions/502.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cwe.mitre.org/data/definitions/502.html"
        },
        {
          "name": "https://github.com/laravel/reverb/releases/tag/v1.7.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/reverb/releases/tag/v1.7.0"
        },
        {
          "name": "https://laravel.com/docs/12.x/reverb#scaling",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://laravel.com/docs/12.x/reverb#scaling"
        }
      ],
      "source": {
        "advisory": "GHSA-m27r-m6rx-mhm4",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Redis Horizontal Scaling Insecure Deserialization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-23524",
    "datePublished": "2026-01-21T22:07:55.682Z",
    "dateReserved": "2026-01-13T18:22:43.980Z",
    "dateUpdated": "2026-01-22T16:49:37.182Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47756 (GCVE-0-2021-47756)

Vulnerability from nvd – Published: 2026-01-15 23:25 – Updated: 2026-08-14 16:49

Title

Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)

Summary

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-16 16:15 UTC

CWE

CWE-732 - Incorrect Permission Assignment for Critical Resource

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8186 records in the last 180 days details

References

3 references

URL	Tags
https://www.exploit-db.com/exploits/50591	exploit
https://laravel.com/docs/8.x/valet	product
https://www.vulncheck.com/advisories/laravel-vale…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
Laravel	Laravel Valet	Affected: 1.1.4 to 2.0.3 cpe:2.3:a:laravel:laravel:1.1.4:::::::*

Date Public

2021-12-14 00:00

Credits

leonjza

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47756",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-16T16:15:32.254651Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-16T16:15:38.890Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Laravel Valet",
          "vendor": "Laravel",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.4 to 2.0.3"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:laravel:laravel:1.1.4:*:*:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leonjza"
        }
      ],
      "datePublic": "2021-12-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T16:49:19.779Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "ExploitDB-50591",
          "tags": [
            "exploit"
          ],
          "url": "https://www.exploit-db.com/exploits/50591"
        },
        {
          "name": "Laravel Valet Official Documentation",
          "tags": [
            "product"
          ],
          "url": "https://laravel.com/docs/8.x/valet"
        },
        {
          "name": "VulnCheck Advisory: Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laravel-valet-local-privilege-escalation-macos"
        }
      ],
      "title": "Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2021-47756",
    "datePublished": "2026-01-15T23:25:35.938Z",
    "dateReserved": "2026-01-10T16:58:28.313Z",
    "dateUpdated": "2026-08-14T16:49:19.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-54068 (GCVE-0-2025-54068)

Vulnerability from nvd – Published: 2025-07-17 18:16 – Updated: 2026-03-23 13:04

CISA Previdian

Title

Livewire vulnerable to remote command execution during property update hydration

Summary

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-21 04:01 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/livewire/livewire/security/adv…	x_refsource_CONFIRM
https://github.com/livewire/livewire/commit/ef04b…	x_refsource_MISC
https://github.com/livewire/livewire/releases/tag…	x_refsource_MISC
https://www.threathunter.ai/blog/iranian-threat-a…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

1 product

Vendor	Product	Version
livewire	livewire	Affected: >= 3.0.0-beta.1, < 3.6.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54068",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-21T04:01:26.670702Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-03-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54068"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T13:04:50.156Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://www.threathunter.ai/blog/iranian-threat-actor-tools-techniques-iocs-ioas/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54068"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "livewire",
          "vendor": "livewire",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0-beta.1, \u003c 3.6.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-17T18:16:56.099Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3"
        },
        {
          "name": "https://github.com/livewire/livewire/commit/ef04be759da41b14d2d129e670533180a44987dc",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/livewire/livewire/commit/ef04be759da41b14d2d129e670533180a44987dc"
        },
        {
          "name": "https://github.com/livewire/livewire/releases/tag/v3.6.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/livewire/livewire/releases/tag/v3.6.4"
        }
      ],
      "source": {
        "advisory": "GHSA-29cq-5w36-x7w3",
        "discovery": "UNKNOWN"
      },
      "title": "Livewire vulnerable to remote command execution during property update hydration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-54068",
    "datePublished": "2025-07-17T18:16:56.099Z",
    "dateReserved": "2025-07-16T13:22:18.204Z",
    "dateUpdated": "2026-03-23T13:04:50.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-13919 (GCVE-0-2024-13919)

Vulnerability from nvd – Published: 2025-03-10 10:03 – Updated: 2025-03-10 17:02

Title

Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

Summary

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.

Severity

8 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-10 12:38 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Assigner

sba-research CNA under the mitre root

CNA scorecard – unranked: 8 records in the last 180 days, 10 needed details

References

4 references

URL	Tags
https://github.com/sbaresearch/advisories/tree/pu…	third-party-advisory
https://github.com/laravel/framework/pull/53869	patch
https://github.com/laravel/framework/releases/tag…	release-notes
http://www.openwall.com/lists/oss-security/2025/03/10/4

Impacted products

1 product

Vendor	Product	Version
Laravel Holdings Inc.	Laravel Framework	Affected: 11.9.0 , ≤ 11.35.1 (custom)

Credits

Fabian Funder (SBA Research) Philipp Adelsberger (SBA Research) Jeremy Angele

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-13919",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-10T12:38:06.695003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-10T12:41:35.550Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-10T17:02:42.335Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/10/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Laravel Framework",
          "repo": "https://github.com/laravel/framework",
          "vendor": "Laravel Holdings Inc.",
          "versions": [
            {
              "lessThanOrEqual": "11.35.1",
              "status": "affected",
              "version": "11.9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The application must run with debug-mode enabled (\u003ctt\u003eAPP_DEBUG=true\u003c/tt\u003e)."
            }
          ],
          "value": "The application must run with debug-mode enabled (APP_DEBUG=true)."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Fabian Funder (SBA Research)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Philipp Adelsberger (SBA Research)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Jeremy Angele"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page."
            }
          ],
          "value": "The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or \u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-10T10:03:01.374Z",
        "orgId": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a",
        "shortName": "sba-research"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/laravel/framework/pull/53869"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v11.36.0"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to version 11.36.0 or later."
            }
          ],
          "value": "Update to version 11.36.0 or later."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure that the application does not run in debug-mode by setting \u003ctt\u003eAPP_DEBUG=false\u003c/tt\u003e in your configuration."
            }
          ],
          "value": "Ensure that the application does not run in debug-mode by setting APP_DEBUG=false in your configuration."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a",
    "assignerShortName": "sba-research",
    "cveId": "CVE-2024-13919",
    "datePublished": "2025-03-10T10:03:01.374Z",
    "dateReserved": "2025-03-04T18:11:39.565Z",
    "dateUpdated": "2025-03-10T17:02:42.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-13918 (GCVE-0-2024-13918)

Vulnerability from nvd – Published: 2025-03-10 10:02 – Updated: 2025-03-10 17:02

Title

Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

Summary

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.

Severity

8 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-10 12:55 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Assigner

sba-research CNA under the mitre root

CNA scorecard – unranked: 8 records in the last 180 days, 10 needed details

References

4 references

URL	Tags
https://github.com/sbaresearch/advisories/tree/pu…	third-party-advisory
https://github.com/laravel/framework/pull/53869	patch
https://github.com/laravel/framework/releases/tag…	release-notes
http://www.openwall.com/lists/oss-security/2025/03/10/3

Impacted products

1 product

Vendor	Product	Version
Laravel Holdings Inc.	Laravel Framework	Affected: 11.9.0 , ≤ 11.35.1 (custom)

Credits

Fabian Funder (SBA Research) Philipp Adelsberger (SBA Research) Jeremy Angele

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-13918",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-10T12:55:25.311761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-10T12:55:46.178Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-03-10T17:02:40.794Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/10/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Laravel Framework",
          "repo": "https://github.com/laravel/framework",
          "vendor": "Laravel Holdings Inc.",
          "versions": [
            {
              "lessThanOrEqual": "11.35.1",
              "status": "affected",
              "version": "11.9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The application must run with debug-mode enabled (\u003ctt\u003eAPP_DEBUG=true\u003c/tt\u003e)."
            }
          ],
          "value": "The application must run with debug-mode enabled (APP_DEBUG=true)."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Fabian Funder (SBA Research)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Philipp Adelsberger (SBA Research)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Jeremy Angele"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page."
            }
          ],
          "value": "The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or \u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-10T10:02:29.530Z",
        "orgId": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a",
        "shortName": "sba-research"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/laravel/framework/pull/53869"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v11.36.0"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to version 11.36.0 or later."
            }
          ],
          "value": "Update to version 11.36.0 or later."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure that the application does not run in debug-mode by setting \u003ctt\u003eAPP_DEBUG=false\u003c/tt\u003e in your configuration."
            }
          ],
          "value": "Ensure that the application does not run in debug-mode by setting APP_DEBUG=false in your configuration."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a",
    "assignerShortName": "sba-research",
    "cveId": "CVE-2024-13918",
    "datePublished": "2025-03-10T10:02:29.530Z",
    "dateReserved": "2025-03-04T18:11:33.625Z",
    "dateUpdated": "2025-03-10T17:02:40.794Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-128083 (GCVE-0-2026-128083)

Vulnerability from cvelistv5 – Published: 2026-11-13 18:44 – Updated: 2026-11-13 18:44

Title

Laravel: Task Output Injection - Concurrency Process

Summary

Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel's Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child's standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0.

Severity

2.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/62297	x_refsource_MISC
https://github.com/laravel/framework/commit/0f904…	x_refsource_MISC
https://github.com/laravel/framework/commit/c3713…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 13.0.0, < 13.40.0 Affected: < 12.71.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.40.0"
            },
            {
              "status": "affected",
              "version": "\u003c 12.71.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel\u0027s Concurrency::run process driver can treat a forged internal result message in child standard output as framework output. An application route must invoke Concurrency::run, and a task must write attacker-controlled bytes at the start of the child\u0027s standard output that form a complete JSON document followed by gzip magic bytes. Under those application-specific conditions, an attacker can forge the internal result message and achieve remote code execution. The affected behavior is not exposed by default and requires application code that routes untrusted input into task output. This issue is fixed in versions 12.71.0 and 13.40.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T18:44:40.992Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q"
        },
        {
          "name": "https://github.com/laravel/framework/pull/62297",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/62297"
        },
        {
          "name": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/0f904940d176d51db1105cc925136f01bb69e92c"
        },
        {
          "name": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/c37133b89b30a86eb404537151edd8944e938f0a"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.71.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.71.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.40.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.40.0"
        }
      ],
      "source": {
        "advisory": "GHSA-63hm-g96r-2m2q",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel: Task Output Injection - Concurrency Process"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-128083",
    "datePublished": "2026-11-13T18:44:40.992Z",
    "dateReserved": "2026-11-12T21:24:51.130Z",
    "dateUpdated": "2026-11-13T18:44:40.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114509 (GCVE-0-2026-114509)

Vulnerability from cvelistv5 – Published: 2026-10-21 21:49 – Updated: 2026-10-28 18:32

Previdian

Title

Laravel TokenGuard authentication bypass through non-string API credentials

Summary

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-28 18:32 UTC

CWE

CWE-287 - Improper Authentication
CWE-1287 - Improper Validation of Specified Type of Input

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/commit/8dbb0…	x_refsource_MISC
https://github.com/laravel/framework/commit/9b21c…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: < 12.68.0 Affected: >= 13.0.0, < 13.29.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-114509",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-28T18:32:04.286628Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-28T18:32:28.863Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 12.68.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.29.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1287",
              "description": "CWE-1287: Improper Validation of Specified Type of Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T21:49:29.486Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6"
        },
        {
          "name": "https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5"
        },
        {
          "name": "https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.68.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.68.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.29.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.29.0"
        }
      ],
      "source": {
        "advisory": "GHSA-f9x3-7vq9-cph6",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel TokenGuard authentication bypass through non-string API credentials"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-114509",
    "datePublished": "2026-10-21T21:49:29.486Z",
    "dateReserved": "2026-10-21T16:15:06.492Z",
    "dateUpdated": "2026-10-28T18:32:28.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-114508 (GCVE-0-2026-114508)

Vulnerability from cvelistv5 – Published: 2026-10-21 21:45 – Updated: 2026-10-23 21:18

Title

Laravel relationship inclusion can trigger unauthorized data destruction

Summary

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-23 17:32 UTC

CWE

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/61322	x_refsource_MISC
https://github.com/laravel/framework/pull/61323	x_refsource_MISC
https://github.com/laravel/framework/commit/50a79…	x_refsource_MISC
https://github.com/laravel/framework/commit/b89f2…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 12.45.0, < 12.68.0 Affected: >= 13.0.0, < 13.27.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-114508",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-23T17:32:51.979205Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-23T21:18:11.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 12.45.0, \u003c 12.68.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.27.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-table data, causing irreversible data loss, denial of service, and loss of data integrity. This issue is fixed in versions 12.68.0 and 13.27.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-470",
              "description": "CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T21:45:31.465Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61322",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61322"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61323",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61323"
        },
        {
          "name": "https://github.com/laravel/framework/commit/50a7970efe9f9990b6ec4f1e949de2abaaf4263e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/50a7970efe9f9990b6ec4f1e949de2abaaf4263e"
        },
        {
          "name": "https://github.com/laravel/framework/commit/b89f2944995d555bfda76dced1ef6c6b04ef17d8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/b89f2944995d555bfda76dced1ef6c6b04ef17d8"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.68.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.68.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.27.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.27.0"
        }
      ],
      "source": {
        "advisory": "GHSA-5wcm-3v2w-8362",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel relationship inclusion can trigger unauthorized data destruction"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-114508",
    "datePublished": "2026-10-21T21:45:31.465Z",
    "dateReserved": "2026-10-21T16:15:06.492Z",
    "dateUpdated": "2026-10-23T21:18:11.415Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102279 (GCVE-0-2026-102279)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:59 – Updated: 2026-09-29 14:44

Title

Laravel: XSS in Debug Page Information

Summary

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is fixed in versions 12.69.0 and 13.30.0.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 14:43 UTC

CWE

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/61381	x_refsource_MISC
https://github.com/laravel/framework/commit/b495c…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: < 12.69.0 Affected: >= 13.0.0, < 13.30.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102279",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T14:43:55.430439Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T14:44:03.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 12.69.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.30.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is fixed in versions 12.69.0 and 13.30.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:59:36.528Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-jh5r-qr3c-85q8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-jh5r-qr3c-85q8"
        },
        {
          "name": "https://github.com/laravel/framework/pull/61381",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/61381"
        },
        {
          "name": "https://github.com/laravel/framework/commit/b495ca2ec4e15a977e8700328bf13e8a79f29d12",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/b495ca2ec4e15a977e8700328bf13e8a79f29d12"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.69.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.69.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.30.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.30.0"
        }
      ],
      "source": {
        "advisory": "GHSA-jh5r-qr3c-85q8",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel: XSS in Debug Page Information"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102279",
    "datePublished": "2026-09-28T20:59:36.528Z",
    "dateReserved": "2026-09-28T20:11:16.659Z",
    "dateUpdated": "2026-09-29T14:44:03.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-48019 (GCVE-0-2026-48019)

Vulnerability from cvelistv5 – Published: 2026-09-04 22:11 – Updated: 2026-09-08 13:01

Title

CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

Summary

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0.

Severity

8.9 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-08 13:01 UTC

CWE

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/laravel/framework/security/adv…	x_refsource_CONFIRM
https://github.com/laravel/framework/pull/60151	x_refsource_MISC
https://github.com/laravel/framework/commit/96e9a…	x_refsource_MISC
https://github.com/laravel/framework/commit/f336b…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC
https://github.com/laravel/framework/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	framework	Affected: >= 13.0.0, < 13.10.0 Affected: < 12.60.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-48019",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-08T13:01:14.091808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T13:01:38.157Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "framework",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.10.0"
            },
            {
              "status": "affected",
              "version": "\u003c 12.60.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel\u0027s email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-93",
              "description": "CWE-93: Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T22:11:40.811Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq"
        },
        {
          "name": "https://github.com/laravel/framework/pull/60151",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/pull/60151"
        },
        {
          "name": "https://github.com/laravel/framework/commit/96e9a663db657cf37ef26cd794fda8ff60eaa451",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/96e9a663db657cf37ef26cd794fda8ff60eaa451"
        },
        {
          "name": "https://github.com/laravel/framework/commit/f336ba79e744257f84ebf0d096b0ebc62e8e1a4d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/commit/f336ba79e744257f84ebf0d096b0ebc62e8e1a4d"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v12.60.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v12.60.0"
        },
        {
          "name": "https://github.com/laravel/framework/releases/tag/v13.10.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/framework/releases/tag/v13.10.0"
        }
      ],
      "source": {
        "advisory": "GHSA-fpqx-6722-p65v",
        "discovery": "UNKNOWN"
      },
      "title": "CRLF injection in Laravel\u0027s default email rule enables SMTP smuggling and spoofed-mail relay"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-48019",
    "datePublished": "2026-09-04T22:11:40.811Z",
    "dateReserved": "2026-05-20T17:44:09.587Z",
    "dateUpdated": "2026-09-08T13:01:38.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-73683 (GCVE-0-2026-73683)

Vulnerability from cvelistv5 – Published: 2026-08-14 21:32 – Updated: 2026-11-08 14:08

Title

Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Summary

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function within FacebookProvider.php. Attackers who obtain a valid, unexpired id_token issued for the same Facebook App ID can submit the captured token to the backend userFromToken() endpoint, bypassing authentication controls because signature, aud, and iss checks pass while no session-bound nonce comparison is performed, resulting in unauthorized access to victim accounts.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 02:16 UTC

CWE

CWE-294 - Authentication Bypass by Capture-replay

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8186 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/laravel/socialite/pull/789	productpatch
https://github.com/laravel/socialite/commit/caf71…	patch
https://github.com/laravel/socialite	vendor-advisory
https://www.vulncheck.com/advisories/laravel-soci…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
Laravel	Socialite	Affected: 0 , < 5.29.0 (semver)

Date Public

2026-08-06 00:00

Credits

Shion Takabe (GitHub: meihao550)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73683",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T02:16:49.436257Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T02:16:58.252Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Socialite",
          "vendor": "Laravel",
          "versions": [
            {
              "lessThan": "5.29.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shion Takabe (GitHub: meihao550)"
        }
      ],
      "datePublic": "2026-08-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Socialite\u0027s Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function within FacebookProvider.php. Attackers who obtain a valid, unexpired id_token issued for the same Facebook App ID can submit the captured token to the backend userFromToken() endpoint, bypassing authentication controls because signature, aud, and iss checks pass while no session-bound nonce comparison is performed, resulting in unauthorized access to victim accounts."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-294",
              "description": "Authentication Bypass by Capture-replay",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T14:08:47.738Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Pull Request",
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://github.com/laravel/socialite/pull/789"
        },
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/laravel/socialite/commit/caf714f55d51ab0d914b40033d8b0f489d6219cc"
        },
        {
          "name": "Product Repository",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/laravel/socialite"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laravel-socialite-facebook-provider-authentication-bypass-via-nonce-replay"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-73683",
    "datePublished": "2026-08-14T21:32:18.055Z",
    "dateReserved": "2026-08-13T15:15:35.896Z",
    "dateUpdated": "2026-11-08T14:08:47.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39976 (GCVE-0-2026-39976)

Vulnerability from cvelistv5 – Published: 2026-04-09 16:50 – Updated: 2026-04-09 19:31

Title

Laravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials Tokens

Summary

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier (since there's no user). The token guard then passes this value to retrieveById() without validating it's actually a user identifier, potentially resolving an unrelated real user. Any machine-to-machine token can inadvertently authenticate as an actual user. This vulnerability is fixed in 13.7.1.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-09 17:38 UTC

CWE

CWE-287 - Improper Authentication

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/passport/security/advi…	x_refsource_CONFIRM
https://github.com/laravel/passport/issues/1900	x_refsource_MISC
https://github.com/thephpleague/oauth2-server/iss…	x_refsource_MISC
https://github.com/laravel/passport/pull/1901	x_refsource_MISC
https://github.com/laravel/passport/pull/1902	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	passport	Affected: >= 13.0.0, < 13.7.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-39976",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-09T17:38:00.854614Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-09T19:31:53.801Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "passport",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 13.0.0, \u003c 13.7.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client_credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier (since there\u0027s no user). The token guard then passes this value to retrieveById() without validating it\u0027s actually a user identifier, potentially resolving an unrelated real user. Any machine-to-machine token can inadvertently authenticate as an actual user. This vulnerability is fixed in 13.7.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-09T16:50:42.326Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/passport/security/advisories/GHSA-349c-2h2f-mxf6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/passport/security/advisories/GHSA-349c-2h2f-mxf6"
        },
        {
          "name": "https://github.com/laravel/passport/issues/1900",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/issues/1900"
        },
        {
          "name": "https://github.com/thephpleague/oauth2-server/issues/1456#issuecomment-2734989996",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/thephpleague/oauth2-server/issues/1456#issuecomment-2734989996"
        },
        {
          "name": "https://github.com/laravel/passport/pull/1901",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/pull/1901"
        },
        {
          "name": "https://github.com/laravel/passport/pull/1902",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/passport/pull/1902"
        }
      ],
      "source": {
        "advisory": "GHSA-349c-2h2f-mxf6",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Passport\u0027s TokenGuard Authenticates Unrelated User for Client Credentials Tokens"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-39976",
    "datePublished": "2026-04-09T16:50:42.326Z",
    "dateReserved": "2026-04-08T00:01:47.628Z",
    "dateUpdated": "2026-04-09T19:31:53.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23524 (GCVE-0-2026-23524)

Vulnerability from cvelistv5 – Published: 2026-01-21 22:07 – Updated: 2026-01-22 16:49

Title

Laravel Redis Horizontal Scaling Insecure Deserialization

Summary

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiated, which leaves users vulnerable to Remote Code Execution. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication, but only affects Laravel Reverb when horizontal scaling is enabled (REVERB_SCALING_ENABLED=true). This issue has been fixed in version 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set REVERB_SCALING_ENABLED=false to bypass the vulnerable logic entirely (if the environment uses only one Reverb node).

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-22 15:13 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/laravel/reverb/security/adviso…	x_refsource_CONFIRM
https://github.com/laravel/reverb/commit/9ec26f8f…	x_refsource_MISC
https://cwe.mitre.org/data/definitions/502.html	x_refsource_MISC
https://github.com/laravel/reverb/releases/tag/v1.7.0	x_refsource_MISC
https://laravel.com/docs/12.x/reverb#scaling	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
laravel	reverb	Affected: < 1.7.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-23524",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-22T15:13:34.417400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-22T16:49:37.182Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "reverb",
          "vendor": "laravel",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.7.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP\u2019s unserialize() function without restricting which classes can be instantiated, which leaves users vulnerable to Remote Code Execution. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication, but only affects Laravel Reverb when horizontal scaling is enabled (REVERB_SCALING_ENABLED=true). This issue has been fixed in version 1.7.0. As a workaround, require a strong password for Redis access and ensure the service is only accessible via a private network or local loopback, and/or set REVERB_SCALING_ENABLED=false to bypass the vulnerable logic entirely (if the environment uses only one Reverb node)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-21T22:07:55.682Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/laravel/reverb/security/advisories/GHSA-m27r-m6rx-mhm4",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/laravel/reverb/security/advisories/GHSA-m27r-m6rx-mhm4"
        },
        {
          "name": "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/reverb/commit/9ec26f8ffbb701f84920dd0bb9781a1797591f1a"
        },
        {
          "name": "https://cwe.mitre.org/data/definitions/502.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cwe.mitre.org/data/definitions/502.html"
        },
        {
          "name": "https://github.com/laravel/reverb/releases/tag/v1.7.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/laravel/reverb/releases/tag/v1.7.0"
        },
        {
          "name": "https://laravel.com/docs/12.x/reverb#scaling",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://laravel.com/docs/12.x/reverb#scaling"
        }
      ],
      "source": {
        "advisory": "GHSA-m27r-m6rx-mhm4",
        "discovery": "UNKNOWN"
      },
      "title": "Laravel Redis Horizontal Scaling Insecure Deserialization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-23524",
    "datePublished": "2026-01-21T22:07:55.682Z",
    "dateReserved": "2026-01-13T18:22:43.980Z",
    "dateUpdated": "2026-01-22T16:49:37.182Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47756 (GCVE-0-2021-47756)

Vulnerability from cvelistv5 – Published: 2026-01-15 23:25 – Updated: 2026-08-14 16:49

Title

Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)

Summary

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-16 16:15 UTC

CWE

CWE-732 - Incorrect Permission Assignment for Critical Resource

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8186 records in the last 180 days details

References

3 references

URL	Tags
https://www.exploit-db.com/exploits/50591	exploit
https://laravel.com/docs/8.x/valet	product
https://www.vulncheck.com/advisories/laravel-vale…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
Laravel	Laravel Valet	Affected: 1.1.4 to 2.0.3 cpe:2.3:a:laravel:laravel:1.1.4:::::::*

Date Public

2021-12-14 00:00

Credits

leonjza

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47756",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-16T16:15:32.254651Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-16T16:15:38.890Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Laravel Valet",
          "vendor": "Laravel",
          "versions": [
            {
              "status": "affected",
              "version": "1.1.4 to 2.0.3"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:laravel:laravel:1.1.4:*:*:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leonjza"
        }
      ],
      "datePublic": "2021-12-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T16:49:19.779Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "ExploitDB-50591",
          "tags": [
            "exploit"
          ],
          "url": "https://www.exploit-db.com/exploits/50591"
        },
        {
          "name": "Laravel Valet Official Documentation",
          "tags": [
            "product"
          ],
          "url": "https://laravel.com/docs/8.x/valet"
        },
        {
          "name": "VulnCheck Advisory: Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/laravel-valet-local-privilege-escalation-macos"
        }
      ],
      "title": "Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)",
      "x_generator": {
        "engine": "vulncheck"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2021-47756",
    "datePublished": "2026-01-15T23:25:35.938Z",
    "dateReserved": "2026-01-10T16:58:28.313Z",
    "dateUpdated": "2026-08-14T16:49:19.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-54068 (GCVE-0-2025-54068)

Vulnerability from cvelistv5 – Published: 2025-07-17 18:16 – Updated: 2026-03-23 13:04

CISA Previdian

Title

Livewire vulnerable to remote command execution during property update hydration

Summary

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-21 04:01 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7886 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/livewire/livewire/security/adv…	x_refsource_CONFIRM
https://github.com/livewire/livewire/commit/ef04b…	x_refsource_MISC
https://github.com/livewire/livewire/releases/tag…	x_refsource_MISC
https://www.threathunter.ai/blog/iranian-threat-a…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

1 product

Vendor	Product	Version
livewire	livewire	Affected: >= 3.0.0-beta.1, < 3.6.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54068",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-21T04:01:26.670702Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-03-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54068"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T13:04:50.156Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://www.threathunter.ai/blog/iranian-threat-actor-tools-techniques-iocs-ioas/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54068"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "livewire",
          "vendor": "livewire",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0-beta.1, \u003c 3.6.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-17T18:16:56.099Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3"
        },
        {
          "name": "https://github.com/livewire/livewire/commit/ef04be759da41b14d2d129e670533180a44987dc",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/livewire/livewire/commit/ef04be759da41b14d2d129e670533180a44987dc"
        },
        {
          "name": "https://github.com/livewire/livewire/releases/tag/v3.6.4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/livewire/livewire/releases/tag/v3.6.4"
        }
      ],
      "source": {
        "advisory": "GHSA-29cq-5w36-x7w3",
        "discovery": "UNKNOWN"
      },
      "title": "Livewire vulnerable to remote command execution during property update hydration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-54068",
    "datePublished": "2025-07-17T18:16:56.099Z",
    "dateReserved": "2025-07-16T13:22:18.204Z",
    "dateUpdated": "2026-03-23T13:04:50.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CERTFR-2026-AVI-1504

Vulnerability from certfr_avis - Published: 2026-11-12 - Updated: 2026-11-12

De multiples vulnérabilités ont été découvertes dans Laravel. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	Laravel versions antérieures à 12.72.0
	Laravel	Laravel	Laravel versions 13.x antérieures à 13.41.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-6rv8-qj5v-p8ch	2026-11-11	vendor-advisory
Bulletin de sécurité Laravel GHSA-v5ch-g375-82r6	2026-11-11	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Laravel versions ant\u00e9rieures \u00e0 12.72.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    },
    {
      "description": "Laravel versions 13.x ant\u00e9rieures \u00e0 13.41.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-11-12T00:00:00",
  "last_revision_date": "2026-11-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1504",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Laravel. Elles permettent \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-11-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-6rv8-qj5v-p8ch",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-6rv8-qj5v-p8ch"
    },
    {
      "published_at": "2026-11-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-v5ch-g375-82r6",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-v5ch-g375-82r6"
    }
  ]
}

CERTFR-2026-AVI-1457

Vulnerability from certfr_avis - Published: 2026-11-04 - Updated: 2026-11-04

Une vulnérabilité a été découverte dans Laravel. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	Laravel versions antérieures à 13.40.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-63hm-g96r-2m2q

2026-11-04

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Laravel versions ant\u00e9rieures \u00e0 13.40.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-11-04T00:00:00",
  "last_revision_date": "2026-11-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1457",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Laravel. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-11-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-63hm-g96r-2m2q",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-63hm-g96r-2m2q"
    }
  ]
}

CERTFR-2026-AVI-1343

Vulnerability from certfr_avis - Published: 2026-10-20 - Updated: 2026-10-20

De multiples vulnérabilités ont été découvertes dans Laravel. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	Laravel versions 13.29.x antérieures à 13.29.0
	Laravel	Laravel	Laravel versions 12.68.x antérieures à 12.68.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-f9x3-7vq9-cph6	2026-10-19	vendor-advisory
Bulletin de sécurité Laravel GHSA-5wcm-3v2w-8362	2026-10-19	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Laravel versions 13.29.x ant\u00e9rieures \u00e0 13.29.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    },
    {
      "description": "Laravel versions 12.68.x ant\u00e9rieures \u00e0 12.68.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-10-20T00:00:00",
  "last_revision_date": "2026-10-20T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1343",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Laravel. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-10-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-f9x3-7vq9-cph6",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6"
    },
    {
      "published_at": "2026-10-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-5wcm-3v2w-8362",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362"
    }
  ]
}

CERTFR-2026-AVI-1153

Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10

Une vulnérabilité a été découverte dans Laravel. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	laravel/framework versions antérieures à v12.69.0
	Laravel	Laravel	laravel/framework versions 13.x antérieures à v13.30.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-jh5r-qr3c-85q8

2026-09-10

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "laravel/framework versions ant\u00e9rieures \u00e0 v12.69.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    },
    {
      "description": "laravel/framework versions 13.x ant\u00e9rieures \u00e0 v13.30.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-09-10T00:00:00",
  "last_revision_date": "2026-09-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1153",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Laravel. Elle permet \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).",
  "title": "Vuln\u00e9rabilit\u00e9 dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-09-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-jh5r-qr3c-85q8",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-jh5r-qr3c-85q8"
    }
  ]
}

CERTFR-2026-AVI-0703

Vulnerability from certfr_avis - Published: 2026-06-08 - Updated: 2026-06-08

Une vulnérabilité a été découverte dans Laravel. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	Laravel versions 13.x antérieures à 13.12.0
	Laravel	Laravel	Laravel versions antérieures à 12.61.1

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-crmm-hgp2-wgrp

2026-06-08

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Laravel versions 13.x ant\u00e9rieures \u00e0 13.12.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    },
    {
      "description": "Laravel versions ant\u00e9rieures \u00e0 12.61.1",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-48041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48041"
    }
  ],
  "initial_release_date": "2026-06-08T00:00:00",
  "last_revision_date": "2026-06-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0703",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Laravel. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-06-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-crmm-hgp2-wgrp",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-crmm-hgp2-wgrp"
    }
  ]
}

CERTFR-2026-AVI-0682

Vulnerability from certfr_avis - Published: 2026-06-03 - Updated: 2026-06-03

Une vulnérabilité a été découverte dans les produits Laravel. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	laravel/passport versions 13.x antérieures à 13.7.1 pour composer

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-349c-2h2f-mxf6

2026-04-08

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "laravel/passport versions 13.x ant\u00e9rieures \u00e0 13.7.1 pour composer",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-39976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39976"
    }
  ],
  "initial_release_date": "2026-06-03T00:00:00",
  "last_revision_date": "2026-06-03T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0682",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Laravel. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-04-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-349c-2h2f-mxf6",
      "url": "https://github.com/laravel/passport/security/advisories/GHSA-349c-2h2f-mxf6"
    }
  ]
}

CERTFR-2026-AVI-0670

Vulnerability from certfr_avis - Published: 2026-06-01 - Updated: 2026-06-01

Une vulnérabilité a été découverte dans Laravel. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	laravel/framework versions 12.x antérieures à 12.60.0
	Laravel	Laravel	laravel/framework versions 13.x antérieures à 13.10.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel GHSA-5vg9-5847-vvmq

2026-06-01

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "laravel/framework versions 12.x ant\u00e9rieures \u00e0 12.60.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    },
    {
      "description": "laravel/framework versions 13.x ant\u00e9rieures \u00e0 13.10.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-48019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48019"
    }
  ],
  "initial_release_date": "2026-06-01T00:00:00",
  "last_revision_date": "2026-06-01T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0670",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Laravel. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2026-06-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel GHSA-5vg9-5847-vvmq",
      "url": "https://github.com/laravel/framework/security/advisories/GHSA-5vg9-5847-vvmq"
    }
  ]
}

CERTFR-2025-AVI-0238

Vulnerability from certfr_avis - Published: 2025-03-25 - Updated: 2025-03-25

De multiples vulnérabilités ont été découvertes dans Laravel. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Laravel	Laravel	Laravel versions 11.9.x à 11.35.x antérieures à 11.36.0

References

Title

Publication Time

Tags

Bulletin de sécurité Laravel

2024-12-17

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Laravel versions 11.9.x \u00e0 11.35.x ant\u00e9rieures \u00e0 11.36.0",
      "product": {
        "name": "Laravel",
        "vendor": {
          "name": "Laravel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-13919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13919"
    },
    {
      "name": "CVE-2024-13918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-13918"
    }
  ],
  "initial_release_date": "2025-03-25T00:00:00",
  "last_revision_date": "2025-03-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0238",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-03-25T00:00:00.000000"
    },
    {
      "description": "Ajout de la section R\u00e9sum\u00e9.",
      "revision_date": "2025-03-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Laravel. Elles permettent \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Laravel",
  "vendor_advisories": [
    {
      "published_at": "2024-12-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Laravel",
      "url": "https://github.com/laravel/framework/releases/tag/v11.36.0"
    }
  ]
}

Find a vulnerability

Search criteria

80 vulnerabilities by laravel

CVE-2026-128083 (GCVE-0-2026-128083)

CVE-2026-114509 (GCVE-0-2026-114509)

CVE-2026-114508 (GCVE-0-2026-114508)

CVE-2026-102279 (GCVE-0-2026-102279)

CVE-2026-48019 (GCVE-0-2026-48019)

CVE-2026-73683 (GCVE-0-2026-73683)

CVE-2026-39976 (GCVE-0-2026-39976)

CVE-2026-23524 (GCVE-0-2026-23524)

CVE-2021-47756 (GCVE-0-2021-47756)

CVE-2025-54068 (GCVE-0-2025-54068)

CVE-2024-13919 (GCVE-0-2024-13919)

CVE-2024-13918 (GCVE-0-2024-13918)

CVE-2026-128083 (GCVE-0-2026-128083)

CVE-2026-114509 (GCVE-0-2026-114509)

CVE-2026-114508 (GCVE-0-2026-114508)

CVE-2026-102279 (GCVE-0-2026-102279)

CVE-2026-48019 (GCVE-0-2026-48019)

CVE-2026-73683 (GCVE-0-2026-73683)

CVE-2026-39976 (GCVE-0-2026-39976)

CVE-2026-23524 (GCVE-0-2026-23524)

CVE-2021-47756 (GCVE-0-2021-47756)

CVE-2025-54068 (GCVE-0-2025-54068)

Solutions

Solutions

Solutions

Solutions

Solutions

Solutions

Solutions

Solutions