VulertSecurity VulertSecurity

Vulnerability Database · Packagist · laravel/framework · Version

laravel/framework v12.26.4

v12.26.4 is affected by 11 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 5 Medium 5 Low 1 Unrated 0

All laravel/framework versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

laravel/framework v12.26.4 vulnerabilities

11 vulnerabilities cover laravel/framework v12.26.4. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2020-19316: OS Command Injection in Laravel Framework 8.8 high 5.8.17 06 Jan 2022
CVE-2018-15133: Laravel Framework RCE Vulnerability 8.1 high No fix published 14 May 2022
CVE-2020-24941: Improper Input Validation in Laravel 7.5 high 6.18.35 06 May 2021
Unexpected Database Bindings in Laravel/Framework and Illuminate/Database 7.2 high 6.20.14 02 Feb 2021
CVE-2021-43808: Laravel Framework XSS in Blade templating engine 6.1 medium 6.20.42 08 Dec 2021
CVE-2017-14775: Laravel Sensitive Data Exposure 5.9 medium 5.5.10 17 May 2022
CVE-2017-14775: Laravel Sensitive Data Exposure 5.9 medium No fix published 17 May 2022
CVE-2026-102279: Laravel Framework XSS Vulnerability in Debug Page Information 3.1 low 12.69.0 29 Sep 2026
Laravel Framework Environment Manipulation Vulnerability - GHSA-gv7v-rgg6-548h 0.0 high 6.20.45 12 Nov 2024
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior N/A medium 5.5.40 15 May 2024
CVE-2021-43617: Laravel Framework allows upload of executable PHP content N/A medium No fix published 16 Nov 2021

Looking for another version, or everything Vulert holds for laravel/framework?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About laravel/framework v12.26.4

Is laravel/framework v12.26.4 vulnerable?

Yes. 11 vulnerabilities in the Vulert database cover laravel/framework v12.26.4: 0 critical, 5 high, 5 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor laravel/framework for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the laravel/framework version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.