Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/laravel/framework@9.0.0-beta.5
purl pkg:composer/laravel/framework@9.0.0-beta.5
Next non-vulnerable version 10.48.29
Latest non-vulnerable version 12.1.1
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-su5t-5e4w-fbc2
Aliases:
CVE-2022-40482
Observable Discrepancy The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in the Illuminate\Auth\SessionGuard class when a user is found to not exist.
9.32.0
Affected by 2 other vulnerabilities.
VCID-tzy8-b9et-fyd9
Aliases:
CVE-2025-27515
GHSA-78fx-h6xr-vch4
Laravel has a File Validation Bypass When using wildcard validation to validate a given file or image field array (`files.*`), a user-crafted malicious request could potentially bypass the validation rules.
10.48.29
Affected by 0 other vulnerabilities.
11.44.1
Affected by 0 other vulnerabilities.
12.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T05:41:30.551625+00:00 GitLab Importer Affected by VCID-tzy8-b9et-fyd9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2025-27515.yml 38.6.0
2026-06-06T03:42:22.756824+00:00 GitLab Importer Affected by VCID-su5t-5e4w-fbc2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/laravel/framework/CVE-2022-40482.yml 38.6.0