slug: laravel

Explanation

Laravel (ララベル) はPHPで最も人気のあるWebアプリケーションフレームワークです。 会員機能・データベース連携・API作成などWebアプリに必要な機能が揃っており、開発効率が非常に高いことで知られています。 Laravel本体は堅牢ですが、サードパーティパッケージの脆弱性や、設定ミス (debug mode 露出等) が脆弱性の原因になることが多いです。
📌 Example
CVE-2024-52301 (Laravel debug mode RCE): APP_DEBUG=true で本番公開すると環境変数経由でリモートコード実行されうるリスクが報告された。

🔖 Related tags

🛡 Vulnerabilities tagged with this 130

Image ID Title
CVE-2026-48019 Vulnerability in Laravel (CVE-2026-48019)
CVE-2026-82911 Cross-Site Request Forgery (CSRF) in Laravel (CVE-2026-82911)
CVE-2026-84374 Path Traversal in maatwebsite/excel (CVE-2026-84374)
CVE-2026-84307 Vulnerability in filament/filament (CVE-2026-84307)
CVE-2026-84306 Vulnerability in filament/filament (CVE-2026-84306)
CVE-2026-81887 Cross-Site Scripting (XSS) in livewire/livewire (CVE-2026-81887)
CVE-2026-77567 Authentication Bypass in filament/filament (CVE-2026-77567)
CVE-2026-76838 SSRF (Server-Side Request Forgery) in Laravel (CVE-2026-76838)
CVE-2026-49849 Unrestricted File Upload in Laravel (CVE-2026-49849)
CVE-2026-63179 Path Traversal in winter/wn-backend-module (CVE-2026-63179)
CVE-2026-57570 Vulnerability in backpack/crud (CVE-2026-57570)
CVE-2026-54256 Vulnerability in winter/wn-backend-module (CVE-2026-54256)
CVE-2026-54182 Vulnerability in backpack/crud (CVE-2026-54182)
CVE-2026-54181 Cross-Site Scripting (XSS) in backpack/crud (CVE-2026-54181)
CVE-2026-54180 Vulnerability in backpack/crud (CVE-2026-54180)
CVE-2026-54179 Cross-Site Scripting (XSS) in backpack/crud (CVE-2026-54179)
CVE-2026-54178 Path Traversal in backpack/crud (CVE-2026-54178)
CVE-2026-54177 Unrestricted File Upload in backpack/crud (CVE-2026-54177)
CVE-2026-54176 Authentication Bypass in backpack/crud (CVE-2026-54176)
CVE-2026-54175 Vulnerability in backpack/crud (CVE-2026-54175)
CVE-2026-73529 Vulnerability in Laravel (CVE-2026-73529)
CVE-2026-73683 Vulnerability in Laravel (CVE-2026-73683)
CVE-2026-35445 Vulnerability in winter/wn-backend-module (CVE-2026-35445)
CVE-2026-32639 Vulnerability in winter/wn-cms-module (CVE-2026-32639)
CVE-2026-32593 SQL Injection in winter/wn-backend-module (CVE-2026-32593)
CVE-2026-32258 Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32258)
CVE-2026-32257 Cross-Site Scripting (XSS) in winter/wn-backend-module (CVE-2026-32257)
CVE-2026-71435 Cross-Site Scripting (XSS) in statamic/cms (CVE-2026-71435)
CVE-2026-71434 Unrestricted File Upload in statamic/cms (CVE-2026-71434)
CVE-2026-64662 Vulnerability in statamic/cms (CVE-2026-64662)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details