VulertSecurity VulertSecurity

Vulnerability Database · Packagist · laravel/framework · Version

laravel/framework v13.11.2

v13.11.2 is affected by 12 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 5 Medium 6 Low 1 Unrated 0

All laravel/framework versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

laravel/framework v13.11.2 vulnerabilities

12 vulnerabilities cover laravel/framework v13.11.2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2020-19316: OS Command Injection in Laravel Framework 8.8 high 5.8.17 06 Jan 2022
CVE-2018-15133: Laravel Framework RCE Vulnerability 8.1 high No fix published 14 May 2022
CVE-2020-24941: Improper Input Validation in Laravel 7.5 high 6.18.35 06 May 2021
Unexpected Database Bindings in Laravel/Framework and Illuminate/Database 7.2 high 6.20.14 02 Feb 2021
CVE-2021-43808: Laravel Framework XSS in Blade templating engine 6.1 medium 6.20.42 08 Dec 2021
CVE-2017-14775: Laravel Sensitive Data Exposure 5.9 medium 5.5.10 17 May 2022
CVE-2017-14775: Laravel Sensitive Data Exposure 5.9 medium No fix published 17 May 2022
Path Confusion Vulnerability in Laravel Framework: Temporary Signed URLs Misrouting 4.2 medium 13.12.0 17 Jun 2026
CVE-2026-102279: Laravel Framework XSS Vulnerability in Debug Page Information 3.1 low 12.69.0 29 Sep 2026
Laravel Framework Environment Manipulation Vulnerability - GHSA-gv7v-rgg6-548h 0.0 high 6.20.45 12 Nov 2024
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior N/A medium 5.5.40 15 May 2024
CVE-2021-43617: Laravel Framework allows upload of executable PHP content N/A medium No fix published 16 Nov 2021

Looking for another version, or everything Vulert holds for laravel/framework?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About laravel/framework v13.11.2

Is laravel/framework v13.11.2 vulnerable?

Yes. 12 vulnerabilities in the Vulert database cover laravel/framework v13.11.2: 0 critical, 5 high, 6 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor laravel/framework for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the laravel/framework version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.