Security Digest
Laravel: known exploited vulnerabilities
2 Laravel CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-03-20 | CVE-2025-54068 | Laravel Livewire Laravel Livewire Code Injection Vulnerability | 2026-04-03 |
| 2024-01-16 | CVE-2018-15133 | Laravel Laravel Framework Laravel Deserialization of Untrusted Data Vulnerability | 2024-02-06 |