Search for packages
| purl | pkg:composer/laravel/framework@11.35.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4gte-7mxp-qfbf
Aliases: CVE-2024-13918 GHSA-546h-56qp-8jmw |
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. |
Affected by 1 other vulnerability. |
|
VCID-9xkc-cfyx-1qaw
Aliases: CVE-2024-13919 GHSA-83wp-f5c3-hqqr |
Laravel framework susceptible to reflected cross-site scripting The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page. |
Affected by 1 other vulnerability. |
|
VCID-tzy8-b9et-fyd9
Aliases: CVE-2025-27515 GHSA-78fx-h6xr-vch4 |
Laravel has a File Validation Bypass When using wildcard validation to validate a given file or image field array (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-06T05:41:45.679340+00:00 | GitLab Importer | Affected by | VCID-9xkc-cfyx-1qaw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2024-13919.yml | 38.6.0 |
| 2026-06-06T05:41:44.367733+00:00 | GitLab Importer | Affected by | VCID-4gte-7mxp-qfbf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2024-13918.yml | 38.6.0 |
| 2026-06-06T05:41:31.841525+00:00 | GitLab Importer | Affected by | VCID-tzy8-b9et-fyd9 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2025-27515.yml | 38.6.0 |