laravel framework vulnerabilities in 2021, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 8.8CVE-2020-19316EPSS 2.5%2021-12-20

   OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

2. 6.1CVE-2021-43808EPSS 0.8%2021-12-08

   Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user tak…

3. 9.8CVE-2021-43617ExploitEPSS 20%2021-11-14

   Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on…