Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filtersLaravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment
Laravel Framework: Temporary Signed URL Path Confusion
Laravel Framework: CRLF injection in default email rule
laravel-crud-wizard-free has File Validation Bypass
Laravel framework susceptible to reflected cross-site scripting
Laravel framework susceptible to reflected cross-site scripting
Laravel has a File Validation Bypass
Laravel environment manipulation via query string
laravel framework SQL Injection via limit and offset functions
laravel framework Unexpected database bindings via requests
Laravel Guard bypass in Eloquent models
Laravel RCE vulnerability in "cookie" session driver
Laravel Cross-site Scripting (XSS) vulnerability in blade templating
Laravel Cookie serialization vulnerability
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Laravel Hijacked authentication cookies vulnerability
Laravel Risk of mass-assignment vulnerabilities
Laravel does not properly constrain the host portion of a password-reset URL
Laravel Sensitive Data Exposure
Laravel Framework Deserialization Vulnerability
Laravel Framework RCE Vulnerability
OS Command Injection in Laravel Framework
Laravel Framework XSS in Blade templating engine
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.