---
title: "Laravel: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/laravel/
description: "Every Laravel vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (2), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-03-20
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Laravel: known exploited vulnerabilities

- 2026-03-20 [CVE-2025-54068](https://erroneo.us/security/cve/CVE-2025-54068/index.md) Laravel Livewire: Laravel Livewire Code Injection Vulnerability (due 2026-04-03; ransomware: Unknown)
- 2024-01-16 [CVE-2018-15133](https://erroneo.us/security/cve/CVE-2018-15133/index.md) Laravel Laravel Framework: Laravel Deserialization of Untrusted Data Vulnerability (due 2024-02-06; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/laravel/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt