slug: laravel

Explanation

Laravel (ララベル) はPHPで最も人気のあるWebアプリケーションフレームワークです。 会員機能・データベース連携・API作成などWebアプリに必要な機能が揃っており、開発効率が非常に高いことで知られています。 Laravel本体は堅牢ですが、サードパーティパッケージの脆弱性や、設定ミス (debug mode 露出等) が脆弱性の原因になることが多いです。
📌 Example
CVE-2024-52301 (Laravel debug mode RCE): APP_DEBUG=true で本番公開すると環境変数経由でリモートコード実行されうるリスクが報告された。

🔖 Related tags

🛡 Vulnerabilities tagged with this 130

Image ID Title
CVE-2026-55409 Cross-Site Scripting (XSS) in filament/forms (CVE-2026-55409)
CVE-2026-48067 Vulnerability in filament/tables (CVE-2026-48067)
CVE-2026-53634 Vulnerability in code16/sharp (CVE-2026-53634)
CVE-2022-31114 Cross-Site Scripting (XSS) in backpack/crud (CVE-2022-31114)
CVE-2026-48810 Vulnerability in Laravel FreeScout (CVE-2026-48810)
CVE-2026-48811 Vulnerability in Laravel FreeScout (CVE-2026-48811)
CVE-2026-47123 Vulnerability in Laravel FreeScout (CVE-2026-47123)
CVE-2026-48555 SSRF (Server-Side Request Forgery) in spatie/laravel-medialibrary (CVE-2026-48555)
CVE-2026-48557 Vulnerability in spatie/laravel-medialibrary (CVE-2026-48557)
CVE-2026-45294 Vulnerability in Laravel FreeScout (CVE-2026-45294)
CVE-2026-45660 SSRF (Server-Side Request Forgery) in statamic/cms (CVE-2026-45660)
CVE-2026-44692 Vulnerability in code16/sharp (CVE-2026-44692)
CVE-2026-44306 Vulnerability in statamic/cms (CVE-2026-44306)
CVE-2026-44262 Code Injection in dedoc/scramble (CVE-2026-44262)
CVE-2026-41524 Cross-Site Scripting (XSS) in Laravel Brave CMS (CVE-2026-41524)
CVE-2026-41906 Vulnerability in Laravel FreeScout (CVE-2026-41906)
CVE-2026-41902 Vulnerability in laravel (CVE-2026-41902)
CVE-2026-34084 Unsafe Deserialization in phpoffice/phpspreadsheet (CVE-2026-34084)
CVE-2026-31843 Vulnerability in goodoneuz/pay-uz (CVE-2026-31843)
CVE-2026-39976 Authentication Bypass in Laravel Passport (CVE-2026-39976)
CVE-2019-25673 Unrestricted File Upload in UniSharp Laravel File Manager (CVE-2019-25673)
CVE-2026-5370 Cross-Site Scripting (XSS) in krayin laravel-crm (CVE-2026-5370)
CVE-2026-34442 Vulnerability in Laravel FreeScout (CVE-2026-34442)
CVE-2026-34443 SSRF (Server-Side Request Forgery) in Laravel FreeScout (CVE-2026-34443)
CVE-2026-4809 Unrestricted File Upload in Laravel (CVE-2026-4809)
CVE-2025-54068 KEV [KEV] Code Injection in Laravel Livewire (CVE-2025-54068)
CVE-2025-68129 Authorization Flaw in Laravel Auth0 (CVE-2025-68129)
CVE-2025-67507 Authentication Bypass in filament/filament (CVE-2025-67507)
CVE-2025-13121 Vulnerability in Laravel cameasy Liketea (CVE-2025-13121)
CVE-2025-64112 Cross-Site Scripting (XSS) in Laravel Collections (CVE-2025-64112)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details