netVigilance Vulnerability intelligence since 2004

Laravel

3 Laravel vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Laravel
Vulnerability Status
overdue 160d2026-04-03 CVE-2025-54068 Laravel / Livewire Laravel Livewire Code Injection Vulnerability 2026-03-20 9.2 past due
overdue 947d2024-02-06 CVE-2018-15133 Laravel / Laravel Framework Laravel Deserialization of Untrusted Data Vulnerability 2024-01-16 8.1 past due
overdue 1067d2023-10-09 CVE-2021-3129 Laravel / Ignition Laravel Ignition File Upload Vulnerability 2023-09-18 9.8 past dueransomware