Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/laravel/framework@11.17.0
purl pkg:composer/laravel/framework@11.17.0
Next non-vulnerable version 11.44.1
Latest non-vulnerable version 12.1.1
Risk
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4gte-7mxp-qfbf
Aliases:
CVE-2024-13918
GHSA-546h-56qp-8jmw
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.
11.36.0
Affected by 1 other vulnerability.
VCID-9xkc-cfyx-1qaw
Aliases:
CVE-2024-13919
GHSA-83wp-f5c3-hqqr
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.
11.36.0
Affected by 1 other vulnerability.
VCID-fhw2-erwk-fqf4
Aliases:
CVE-2024-52301
GHSA-gv7v-rgg6-548h
Laravel environment manipulation via query string When the `register_argc_argv php` directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.
11.31.0
Affected by 3 other vulnerabilities.
VCID-tzy8-b9et-fyd9
Aliases:
CVE-2025-27515
GHSA-78fx-h6xr-vch4
Laravel has a File Validation Bypass When using wildcard validation to validate a given file or image field array (`files.*`), a user-crafted malicious request could potentially bypass the validation rules.
11.44.1
Affected by 0 other vulnerabilities.
12.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T05:41:45.534156+00:00 GitLab Importer Affected by VCID-9xkc-cfyx-1qaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2024-13919.yml 38.6.0
2026-06-06T05:41:44.233174+00:00 GitLab Importer Affected by VCID-4gte-7mxp-qfbf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2024-13918.yml 38.6.0
2026-06-06T05:41:31.691019+00:00 GitLab Importer Affected by VCID-tzy8-b9et-fyd9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2025-27515.yml 38.6.0
2026-06-06T05:30:58.927737+00:00 GitLab Importer Affected by VCID-fhw2-erwk-fqf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2024-52301.yml 38.6.0