PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
laravel/framework Laravel TokenGuard authentication bypass through non-string API credentials Critical 9.5 18 days ago 10 hours ago
laravel/framework Laravel relationship inclusion can trigger unauthorized data destruction Medium Risk 6.5 18 days ago 18 days ago
laravel/framework Laravel: XSS in Debug Page Information Low Risk 3.1 1 month ago 1 month ago
laravel/framework Laravel Framework: Temporary Signed URL Path Confusion Medium Risk 4.2 4 months ago 2 months ago
laravel/framework Laravel Framework: CRLF injection in default email rule High Risk 8.9 4 months ago 2 months ago
laravel/framework Laravel has a File Validation Bypass Medium Risk 6.0 1 year ago 2 months ago
laravel/framework Query Binding Exploitation High Risk 7.2 5 years ago 2 months ago
laravel/framework Laravel Framework XSS in Blade templating engine Medium Risk 6.1 4 years ago 4 months ago
laravel/framework Laravel framework susceptible to reflected cross-site scripting Medium Risk 4.7 1 year ago 1 year ago
laravel/framework Laravel framework susceptible to reflected cross-site scripting Medium Risk 4.7 1 year ago 1 year ago
laravel/framework Laravel Framework RCE Vulnerability High Risk 8.1 4 years ago 1 year ago
laravel/framework Laravel environment manipulation via query string Low Risk 0.0 1 year ago 1 year ago
laravel/framework Unexpected database bindings High Risk 7.2 5 years ago 1 year ago
laravel/framework SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database High Risk 8.0 5 years ago 1 year ago
laravel/framework Laravel Cross-site Scripting (XSS) vulnerability in blade templating Medium Risk 4.3 2 years ago 1 year ago
laravel/framework Laravel Risk of mass-assignment vulnerabilities Medium Risk 6.0 2 years ago 1 year ago
laravel/framework laravel framework SQL Injection via limit and offset functions High Risk 8.0 2 years ago 1 year ago
laravel/framework Laravel Cookie serialization vulnerability High Risk 8.0 2 years ago 1 year ago
laravel/framework Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior Medium Risk 6.0 2 years ago 1 year ago
laravel/framework Laravel Guard bypass in Eloquent models Medium Risk 6.0 2 years ago 1 year ago
laravel/framework Laravel RCE vulnerability in "cookie" session driver Critical 9.9 2 years ago 1 year ago
laravel/framework laravel framework Unexpected database bindings via requests High Risk 8.0 2 years ago 1 year ago
laravel/framework Laravel Hijacked authentication cookies vulnerability Medium Risk 6.0 2 years ago 1 year ago
laravel/framework Laravel does not properly constrain the host portion of a password-reset URL Medium Risk 6.1 4 years ago 2 years ago
laravel/framework OS Command Injection in Laravel Framework High Risk 8.8 4 years ago 2 years ago
laravel/framework Laravel Sensitive Data Exposure Medium Risk 5.9 4 years ago 2 years ago
laravel/framework Laravel Framework Deserialization Vulnerability Critical 9.8 4 years ago 2 years ago
laravel/framework Improper Input Validation in Laravel High Risk 7.5 5 years ago 2 years ago
Data courtesy of OSV.dev
Page 1