Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Laravel: actively exploited vulnerabilities

3 vulnerabilities in Laravel products (Ignition, Laravel Framework, Livewire) are in CISA’s catalog of exploited vulnerabilities. Last added: March 20, 2026.

By category

Add just one Laravel category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Ignition 1 vulnerability · Frameworks
  • Laravel Framework 1 vulnerability · Frameworks
  • Livewire 1 vulnerability · Frameworks

Name used by CISA: Laravel. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Laravel list.

  1. Rank 1Laravel Livewire

    CVE-2025-54068

    Laravel Livewire Code Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Laravel Ignition

    CVE-2021-3129

    RansomwareCVE from 2021, added in 2023

    Laravel Ignition File Upload Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 18, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Laravel Framework

    CVE-2018-15133

    CVE from 2018, added in 2024

    Laravel Deserialization of Untrusted Data Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 16, 2024
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.