Exploited vulnerabilities
Laravel
3 Laravel vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue3
Last 12 months1
In ransomware campaigns1
Last addition20 March 2026
The vulnerabilities3
- 20 March 2026CVE-2025-54068LivewireLaravel Livewire Code Injection Vulnerability
- 16 January 2024CVE-2018-15133Laravel FrameworkLaravel Deserialization of Untrusted Data Vulnerability
- 18 September 2023CVE-2021-3129IgnitionLaravel Ignition File Upload VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Laravel included.