Back
Platform
Laravel
Related CVEs
Recent activity
CVE-2026-105222 Exposes Google Maps API KeysThe alexpechkarev/google-maps Laravel package, through version 12.16, disables TLS certificate verification by default, allowing on-path attackers to intercept web-service requests…Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 DisclosedOn October 20, 2026, two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remote code execution (RCE) on af…PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency PatchesOn October 21, 2026, the PHP security team released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on…Critical PHP2Shell Vulnerabilities Expose Millions to Remote Code ExecutionOn October 21, 2026, the PHP project released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. These flaws …Critical Authentication Bypass Vulnerability in Laravel Token GuardLaravel disclosed a critical authentication bypass vulnerability in its token API guard, tracked as GHSA-f9x3-7vq9-cph6. The flaw allows unauthenticated attackers to log in as exis…High-Severity Laravel CRLF Injection Vulnerability DiscoveredA critical CRLF injection vulnerability in the Laravel framework, tracked as CVE-2026-48019, could allow attackers to manipulate outbound email processing in affected applications.…OphimCMS Supply Chain Attack Delivers Trojanized jQuery via Malicious Packagist ThemesA supply chain attack has compromised OphimCMS, a Vietnamese-language Laravel CMS, through six malicious Composer packages published on Packagist. These packages, disguised as legi…Supply Chain Attack: Malicious Laravel Packages Deploy PHP RATA supply chain attack has targeted the PHP developer community via Packagist, where threat actor nhattuanbl published malicious packages disguised as Laravel utility libraries. The…Botnets Target PHP Servers and IoT Devices in Increased Cloud AttacksCybersecurity researchers report a rise in attacks targeting PHP servers, IoT devices, and cloud gateways. Botnets like Mirai, Gafgyt, and Mozi are exploiting known vulnerabilities…