How many laravel framework CVEs are in CISA KEV?

Yes — 1 of laravel framework's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of laravel framework are affected?

1,014 distinct laravel framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in laravel framework CVEs?

laravel framework's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-20 (Improper Input Validation).

How many critical laravel framework vulnerabilities are there?

laravel framework has 3 critical and 11 high-severity CVEs.

What is the average severity of laravel framework CVEs?

The average CVSS base score across laravel framework's scored CVEs is 7.6.

laravel framework Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: laravel framework vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

laravel framework Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

laravel framework has 21 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.6. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of laravel framework's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High11

Medium5

Low1

1 additional CVE has no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

One of laravel framework's CVEs is confirmed exploited in the wild.

Public exploits

12 of laravel framework's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every laravel framework version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

4.0.013 CVEs
4.0.0-BETA313 CVEs
4.0.0-BETA413 CVEs
4.1.013 CVEs
4.0.0-BETA212 CVEs
5.5.012 CVEs
5.5.111 CVEs
8.0.08 CVEs
8.0.18 CVEs
8.0.28 CVEs
8.0.38 CVEs
8.0.48 CVEs

Common weakness types

The CWE weakness categories most often found in laravel framework CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many laravel framework CVEs were published each year.

2017

2018

2019

2020

2021

2022

2023

Other laravel products

Browse vulnerabilities for other products by laravel.

laravel14 CVEs laravel/framework13 CVEs livewire4 CVEs laravel/reverb2 CVEs reverb2 CVEs akaunting/akaunting1 CVEs fortify1 CVEs illuminate/view1 CVEs

Frequently asked questions

Common questions about laravel framework vulnerabilities.

How many CVEs does laravel framework have?: laravel framework has 21 published CVE records since 2017.
How many laravel framework CVEs are in CISA KEV?: Yes — 1 of laravel framework's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for laravel framework vulnerabilities?: Yes — 12 of laravel framework's CVEs have a known public exploit.
Which versions of laravel framework are affected?: 1,014 distinct laravel framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in laravel framework CVEs?: laravel framework's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-20 (Improper Input Validation).
How many critical laravel framework vulnerabilities are there?: laravel framework has 3 critical and 11 high-severity CVEs.
What is the average severity of laravel framework CVEs?: The average CVSS base score across laravel framework's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track laravel framework vulnerabilities

Get an alert for each new laravel framework CVE, with AI-written analysis and remediation steps.

Create an account See pricing

laravel framework Vulnerabilities