Laravel

CVEs currently on EVULNABLE's Priority Feed for Laravel, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 3 Laravel CVEs in EVULNABLE's ranked feed.

#1 94 Immediate CVE-2021-3129 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2023-09-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

#2 88 Immediate CVE-2025-54068 ExigentCISA federal deadline · Overdue by 6 monthsCISA KEV Laravel — Laravel Livewire Code Injection Vulnerability

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.2 (NVD)EPSS97.3% · 99.9th pctlKEV since2026-03-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.

#3 79 Urgent CVE-2018-15133 KEV since 2024 · listed over a yearCISA KEV Laravel — Laravel Deserialization of Untrusted Data Vulnerability

EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.1 (NVD)EPSS76.6% · 99.54th pctlKEV since2024-01-16

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.766.