slug: laravel

Explanation

Laravel (ララベル) はPHPで最も人気のあるWebアプリケーションフレームワークです。 会員機能・データベース連携・API作成などWebアプリに必要な機能が揃っており、開発効率が非常に高いことで知られています。 Laravel本体は堅牢ですが、サードパーティパッケージの脆弱性や、設定ミス (debug mode 露出等) が脆弱性の原因になることが多いです。
📌 Example
CVE-2024-52301 (Laravel debug mode RCE): APP_DEBUG=true で本番公開すると環境変数経由でリモートコード実行されうるリスクが報告された。

🔖 Related tags

🛡 Vulnerabilities tagged with this 130

Image ID Title
CVE-2026-64663 Vulnerability in statamic/cms (CVE-2026-64663)
CVE-2026-64665 Authentication Bypass in statamic/cms (CVE-2026-64665)
CVE-2026-64664 Information Disclosure in statamic/cms (CVE-2026-64664)
CVE-2026-71233 Cross-Site Scripting (XSS) in Laravel (CVE-2026-71233)
CVE-2026-66416 Cross-Site Request Forgery (CSRF) in Laravel (CVE-2026-66416)
CVE-2026-61609 Vulnerability in pterodactyl/panel (CVE-2026-61609)
CVE-2026-53594 Path Traversal in Laravel (CVE-2026-53594)
CVE-2026-53595 Vulnerability in Laravel (CVE-2026-53595)
CVE-2026-53596 Vulnerability in Laravel (CVE-2026-53596)
CVE-2026-53591 Authentication Bypass in Laravel (CVE-2026-53591)
CVE-2026-53592 Vulnerability in Laravel (CVE-2026-53592)
CVE-2026-53593 Unrestricted File Upload in Laravel Apache (CVE-2026-53593)
CVE-2026-48812 Authentication Bypass in Laravel (CVE-2026-48812)
CVE-2026-45295 Vulnerability in Laravel (CVE-2026-45295)
CVE-2026-49971 Cross-Site Scripting (XSS) in Laravel (CVE-2026-49971)
CVE-2026-49972 Unrestricted File Upload in Laravel Apache (CVE-2026-49972)
CVE-2026-49969 SSRF (Server-Side Request Forgery) in Laravel (CVE-2026-49969)
CVE-2026-49970 Path Traversal in plank/laravel-mediable (CVE-2026-49970)
CVE-2026-55461 Open Redirect in snipe/snipe-it (CVE-2026-55461)
CVE-2026-53932 Command Injection in wnx/laravel-backup-restore (CVE-2026-53932)
CVE-2026-57958 Cross-Site Scripting (XSS) in Laravel (CVE-2026-57958)
CVE-2026-54244 Authorization Flaw in statamic/cms (CVE-2026-54244)
CVE-2026-54243 Vulnerability in statamic/cms (CVE-2026-54243)
CVE-2026-54242 Vulnerability in statamic/cms (CVE-2026-54242)
CVE-2026-48500 Vulnerability in filament/filament (CVE-2026-48500)
CVE-2026-48505 Vulnerability in filament/filament (CVE-2026-48505)
CVE-2026-48166 Vulnerability in filament/filament (CVE-2026-48166)
CVE-2026-48167 Cross-Site Scripting (XSS) in filament/infolists (CVE-2026-48167)
CVE-2026-49288 Information Disclosure in statamic/cms (CVE-2026-49288)
CVE-2026-49287 Vulnerability in statamic/cms (CVE-2026-49287)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details