Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/laravel/framework@11.41.2
purl pkg:composer/laravel/framework@11.41.2
Next non-vulnerable version 11.44.1
Latest non-vulnerable version 12.1.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2ujb-xr8g-uqb4
Aliases:
CVE-2025-27515
GHSA-78fx-h6xr-vch4
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
11.44.1
Affected by 0 other vulnerabilities.
12.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:54:12.251842+00:00 GitLab Importer Affected by VCID-2ujb-xr8g-uqb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2025-27515.yml 38.6.0