[CVE-2026-102279 ] Published: Sep 9, 2026, 10:00:00 PM UTC
Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML t
Low(3.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 28, 2026, 5:50:01 AM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Affected
nvd · php-laravel-framework · debian · bookworm; nvd · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Affected
nvd · php-laravel-framework · debian · bookworm; nvd · php-laravel-framework · debian · 12
[CVE-2026-48019 ] Published: May 31, 2026, 10:00:00 PM UTC
php-laravel-framework: CVE-2026-48019
High(8.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 28, 2026, 5:50:01 AM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2024-13918 ] Published: Mar 10, 2025, 11:00:00 PM UTC
php-laravel-framework: CVE-2024-13918
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 24, 2026, 11:30:38 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2024-13919 ] Published: Mar 10, 2025, 11:00:00 PM UTC
php-laravel-framework: CVE-2024-13919
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 24, 2026, 11:30:38 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2025-27515 ] Published: Mar 5, 2025, 7:15:39 PM UTC
php-laravel-framework: CVE-2025-27515
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 24, 2026, 11:34:49 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2024-52301 ] Published: Nov 12, 2024, 8:15:14 PM UTC
php-laravel-framework: CVE-2024-52301
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 27, 2026, 12:45:29 AM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Affected
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2018-15133 ] Published: Jan 16, 2024, 12:00:00 AM UTC
php-laravel-framework: CVE-2018-15133
LowCISA KEV
Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:34:54 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2021-43808 ] Published: Dec 8, 2021, 12:15:07 AM UTC
php-laravel-framework: CVE-2021-43808
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:03:29 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.14+dfsg-3
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.14+dfsg-3
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2021-43617 ] Published: Nov 14, 2021, 4:15:08 PM UTC
php-laravel-framework: CVE-2021-43617
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:03:29 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.14+dfsg-3
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.14+dfsg-3
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2021-21263 ] Published: Jan 19, 2021, 8:15:13 PM UTC
php-laravel-framework: CVE-2021-21263
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:54:33 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.11+dfsg-1
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
8.83.26+dfsg-2 · all · bookworm
Fixed · Fixed: 6.20.11+dfsg-1
dsa · php-laravel-framework · debian · bookworm; dsa · php-laravel-framework · debian · 12
[CVE-2017-14775 ] Published: Not reported
php-laravel-framework: CVE-2017-14775
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:26:57 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2017-16894 ] Published: Not reported
php-laravel-framework: CVE-2017-16894
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:27:45 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2017-9303 ] Published: Not reported
php-laravel-framework: CVE-2017-9303
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:31:55 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2018-6330 ] Published: Not reported
php-laravel-framework: CVE-2018-6330
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:37:33 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2020-19316 ] Published: Not reported
php-laravel-framework: CVE-2020-19316
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:48:55 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2020-24940 ] Published: Not reported
php-laravel-framework: CVE-2020-24940
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:49:21 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
[CVE-2020-24941 ] Published: Not reported
php-laravel-framework: CVE-2020-24941
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:49:21 PM UTC
Details (2) 8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm
8.83.26+dfsg-2 · all · bookworm
Not affected
dsa · php-laravel-framework · debian · bookworm