Vulnerability Database · Packagist · laravel/framework · Version
laravel/framework 10.50.2
10.50.2 is affected by 5 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 3 Low 1 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
laravel/framework 10.50.2 vulnerabilities
5 vulnerabilities cover laravel/framework 10.50.2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2018-15133: Laravel Framework RCE Vulnerability | 8.1 high | No fix published | 14 May 2022 |
| CVE-2017-14775: Laravel Sensitive Data Exposure | 5.9 medium | No fix published | 17 May 2022 |
| CVE-2026-102279: Laravel Framework XSS Vulnerability in Debug Page Information | 3.1 low | 12.69.0 | 29 Sep 2026 |
| Laravel Guard Bypass in Eloquent Models | N/A medium | No fix published | 15 May 2024 |
| CVE-2021-43617: Laravel Framework allows upload of executable PHP content | N/A medium | No fix published | 16 Nov 2021 |
Looking for another version, or everything Vulert holds for laravel/framework?
Questions
About laravel/framework 10.50.2
Is laravel/framework 10.50.2 vulnerable?
Yes. 5 vulnerabilities in the Vulert database cover laravel/framework 10.50.2: 0 critical, 1 high, 3 medium and 1 low. Each entry above names the fixed version to move to.
How do I monitor laravel/framework for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the laravel/framework version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.