Known Vulnerabilities for Framework by Laravel
Listed below are 6 of the newest known vulnerabilities associated with "Framework" by "Laravel".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114437 json | In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-112950 json | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until 4.1.12 and 5.0.3, isFileL... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112949 json | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, a... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112948 json | Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112947 json | Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112946 json | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can reco... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112945 json | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custo... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111874 json | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of ... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-111757 json | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic ... | Not Provided | 2026-10-19 | 2026-10-20 |
| CVE-2026-111750 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accep... | Not Provided | 2026-10-19 | 2026-10-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Laravel | Framework | 5.7.9 | |||
| Application | Laravel | Framework | 5.7.8 | |||
| Application | Laravel | Framework | 5.7.7 | |||
| Application | Laravel | Framework | 5.7.6 | |||
| Application | Laravel | Framework | 5.7.5 | |||
| Application | Laravel | Framework | 5.7.4 | |||
| Application | Laravel | Framework | 5.7.3 | |||
| Application | Laravel | Framework | 5.7.27 | |||
| Application | Laravel | Framework | 5.7.26 | |||
| Application | Laravel | Framework | 5.7.25 | |||
| Application | Laravel | Framework | 5.7.24 | |||
| Application | Laravel | Framework | 5.7.23 | |||
| Application | Laravel | Framework | 5.7.22 | |||
| Application | Laravel | Framework | 5.7.21 | |||
| Application | Laravel | Framework | 5.7.20 | |||
| Application | Laravel | Framework | 5.7.2 | |||
| Application | Laravel | Framework | 5.7.19 | |||
| Application | Laravel | Framework | 5.7.18 | |||
| Application | Laravel | Framework | 5.7.17 | |||
| Application | Laravel | Framework | 5.7.16 |