Search for packages
| purl | pkg:composer/laravel/framework@11.31.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4gte-7mxp-qfbf
Aliases: CVE-2024-13918 GHSA-546h-56qp-8jmw |
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. |
Affected by 1 other vulnerability. |
|
VCID-9xkc-cfyx-1qaw
Aliases: CVE-2024-13919 GHSA-83wp-f5c3-hqqr |
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page. |
Affected by 1 other vulnerability. |
|
VCID-tzy8-b9et-fyd9
Aliases: CVE-2025-27515 GHSA-78fx-h6xr-vch4 |
Laravel has a File Validation Bypass When using wildcard validation to validate a given file or image field array (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-fhw2-erwk-fqf4 | Laravel environment manipulation via query string When the `register_argc_argv php` directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. |
CVE-2024-52301
GHSA-gv7v-rgg6-548h |