How many laravel laravel/framework CVEs are in CISA KEV?

Yes — 1 of laravel laravel/framework's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of laravel laravel/framework are affected?

48 distinct laravel laravel/framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in laravel laravel/framework CVEs?

laravel laravel/framework's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-155 (Improper Neutralization of Wildcards or Matching Symbols), CWE-502 (Deserialization of Untrusted Data), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

How many critical laravel laravel/framework vulnerabilities are there?

laravel laravel/framework has 1 critical and 6 high-severity CVEs.

What is the average severity of laravel laravel/framework CVEs?

The average CVSS base score across laravel laravel/framework's scored CVEs is 7.5.

laravel laravel/framework Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: laravel laravel/framework vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

laravel laravel/framework Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

laravel laravel/framework has 11 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting laravel laravel/framework, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of laravel laravel/framework's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High6

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of laravel laravel/framework's CVEs is confirmed exploited in the wild.

Public exploits

3 of laravel laravel/framework's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every laravel laravel/framework version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

11.9.0 <= v < 11.36.02 CVEs
< 10.48.291 CVE
< 5.5.101 CVE
< 5.8.171 CVE
< 6.18.351 CVE
< 6.20.421 CVE
< 6.20.451 CVE
<= 5.5.401 CVE
10.0.0 <= v < 10.48.231 CVE
11.0.0 <= v < 11.31.01 CVE
11.0.0 <= v < 11.44.11 CVE
12.0.0 <= v < 12.1.1

Common weakness types

The CWE weakness categories most often found in laravel laravel/framework CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many laravel laravel/framework CVEs were published each year.

2017

2018

2020

2021

2024

2025

Other laravel products

Browse vulnerabilities for other products by laravel.

framework19 CVEs laravel12 CVEs livewire4 CVEs laravel/reverb2 CVEs reverb2 CVEs akaunting/akaunting1 CVEs fortify1 CVEs illuminate/view1 CVEs

All laravel vulnerabilities

Frequently asked questions

Common questions about laravel laravel/framework vulnerabilities.

How many CVEs does laravel laravel/framework have?: laravel laravel/framework has 11 published CVE records since 2017.
How many laravel laravel/framework CVEs are in CISA KEV?: Yes — 1 of laravel laravel/framework's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for laravel laravel/framework vulnerabilities?: Yes — 3 of laravel laravel/framework's CVEs have a known public exploit.
Which versions of laravel laravel/framework are affected?: 48 distinct laravel laravel/framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in laravel laravel/framework CVEs?: laravel laravel/framework's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-155 (Improper Neutralization of Wildcards or Matching Symbols), CWE-502 (Deserialization of Untrusted Data), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).
How many critical laravel laravel/framework vulnerabilities are there?: laravel laravel/framework has 1 critical and 6 high-severity CVEs.
What is the average severity of laravel laravel/framework CVEs?: The average CVSS base score across laravel laravel/framework's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track laravel laravel/framework vulnerabilities

Monitor new laravel laravel/framework vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing