Laravel
3 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-54068 |
Livewire | — | 0.9628 | 2026-03-20 | 2026-04-03 | Laravel Livewire contain a code injection vulnerability that could allow unauthe | |
CVE-2018-15133 |
Laravel Framework | — | — | 2024-01-16 | 2024-02-06 | Laravel Framework contains a deserialization of untrusted data vulnerability, al | |
CVE-2021-3129 |
Ignition | — | — | 2023-09-18 | 2023-10-09 | RW | Laravel Ignition contains a file upload vulnerability that allows unauthenticate |