A severe Laravel CRLF injection vulnerability exposes web apps to mail relay abuse. Apply the latest CVE-2026-48019 patch to protect your infrastructure.
Laravel Framework
CVE-2024-13918 and CVE-2024-13919, affect Laravel versions between 11.9.0 and 11.35.1 and could allow attackers to execute arbitrary JavaScript code
Learn about the critical security vulnerability, CVE-2024-52301, in Laravel framework. Discover how this issue could expose applications to unauthorized access and data tampering.
Laravel Framework Hit by Data Exposure Vulnerability (CVE-2024-29291) – Database Credentials at Risk
CVE-2024-29291 affects versions 8.* through 11.* of Laravel and has the potential to expose sensitive database login credentials.
AndroxGh0st, a sophisticated Python-based malware that exploits vulnerabilities within Laravel applications, extracting sensitive information
tracked as CVE-2018-15133 (CVSS score: 8.1), the vulnerability has been described as a deserialization of untrusted data vulnerability