Brand
Laravel: actively exploited vulnerabilities
3 vulnerabilities in Laravel products (Ignition, Laravel Framework, Livewire) are in CISA’s catalog of exploited vulnerabilities. Last added: March 20, 2026.
-
1 vulnerability added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Laravel category to your radar, or open its page.
- Frameworks and libraries 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Laravel product (Ignition, Laravel Framework…) rather than the whole brand.
- Ignition1 vulnerability, Frameworks
- Laravel Framework1 vulnerability, Frameworks
- Livewire1 vulnerability, Frameworks
Name used by CISA: Laravel. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Laravel list.
- Rank 1
Laravel LivewireCVE-2025-54068
Laravel Livewire Code Injection Vulnerability
CVSS severity 9.8critical
Added Mar 20, 2026
- Rank 2
Laravel IgnitionCVE-2021-3129
Laravel Ignition File Upload Vulnerability
RansomwareCVE from 2021, added in 2023
CVSS severity 9.8critical
Added Sep 18, 2023
- Rank 3
Laravel FrameworkCVE-2018-15133
Laravel Deserialization of Untrusted Data Vulnerability
CVE from 2018, added in 2024
CVSS severity 8.1high
Added Jan 16, 2024
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.