slug: laravel

Explanation

Laravel (ララベル) はPHPで最も人気のあるWebアプリケーションフレームワークです。 会員機能・データベース連携・API作成などWebアプリに必要な機能が揃っており、開発効率が非常に高いことで知られています。 Laravel本体は堅牢ですが、サードパーティパッケージの脆弱性や、設定ミス (debug mode 露出等) が脆弱性の原因になることが多いです。
📌 Example
CVE-2024-52301 (Laravel debug mode RCE): APP_DEBUG=true で本番公開すると環境変数経由でリモートコード実行されうるリスクが報告された。

🔖 Related tags

🛡 Vulnerabilities tagged with this 130

Image ID Title
CVE-2026-55386 SQL Injection in Laravel InvoiceShelf (CVE-2026-55386)
CVE-2026-110629 Vulnerability in VentureDrake Laravel CRM (CVE-2026-110629)
CVE-2026-110630 Authorization Flaw in VentureDrake Laravel CRM (CVE-2026-110630)
CVE-2026-109566 Vulnerability in Laravel Rapyd Admin (CVE-2026-109566)
CVE-2026-105222 Vulnerability in Laravel (CVE-2026-105222)
CVE-2026-104181 Vulnerability in filament/filament (CVE-2026-104181)
CVE-2026-102628 Vulnerability in Laravel (CVE-2026-102628)
CVE-2026-102279 Vulnerability in laravel/framework (CVE-2026-102279)
CVE-2026-100883 Vulnerability in Krayin laravel-crm (CVE-2026-100883)
CVE-2026-100885 Vulnerability in Krayin laravel-crm (CVE-2026-100885)
CVE-2026-100884 Vulnerability in Krayin laravel-crm (CVE-2026-100884)
CVE-2026-100882 Cross-Site Scripting (XSS) in Krayin laravel-crm (CVE-2026-100882)
CVE-2026-97897 Cross-Site Scripting (XSS) in Krayin laravel-crm (CVE-2026-97897)
CVE-2026-97896 Cross-Site Scripting (XSS) in krayin laravel-crm (CVE-2026-97896)
CVE-2026-97895 Vulnerability in krayin laravel-crm (CVE-2026-97895)
CVE-2026-61823 Cross-Site Scripting (XSS) in code16/sharp (CVE-2026-61823)
CVE-2026-61825 Cross-Site Scripting (XSS) in code16/sharp (CVE-2026-61825)
CVE-2026-96744 Vulnerability in Laravel (CVE-2026-96744)
CVE-2026-93352 Unrestricted File Upload in Laravel Apache (CVE-2026-93352)
CVE-2026-46696 Privilege Escalation in october/system (CVE-2026-46696)
CVE-2026-61701 Unsafe Deserialization in Laravel (CVE-2026-61701)
CVE-2026-88027 Vulnerability in Laravel Mongodb (CVE-2026-88027)
CVE-2026-88028 Vulnerability in Laravel Mongodb (CVE-2026-88028)
CVE-2026-88022 Vulnerability in Laravel Mongodb (CVE-2026-88022)
CVE-2026-86755 Authorization Flaw in Laravel Snipe-IT (CVE-2026-86755)
CVE-2026-86756 Open Redirect in Laravel Snipe-IT (CVE-2026-86756)
CVE-2026-86751 Vulnerability in Laravel Snipe-IT (CVE-2026-86751)
CVE-2026-86754 Authorization Flaw in Laravel Snipe-IT (CVE-2026-86754)
CVE-2026-86749 Vulnerability in Laravel Snipe-IT (CVE-2026-86749)
CVE-2026-55250 Vulnerability in Laravel (CVE-2026-55250)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details