ZeusQA
Start free

Known exploited vulnerabilities

Laravel vulnerabilities attackers have used

Every Laravel vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Laravel vulnerabilities as exploited in the wild, 1 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2025-54068, added Mar 20, 2026. Ignition has the most entries (1).

In KEV, all time
3
Added, last 12 months
1
Used in ransomware
1
New CVEs this week
0

By product

Ignition (1), Laravel Framework (1), Livewire (1).

Every Laravel entry in CISA KEV

  1. CVE-2025-54068

    Added · due

    Laravel Livewire Code Injection Vulnerability

    Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.

  2. CVE-2018-15133

    Added · due

    Laravel Deserialization of Untrusted Data Vulnerability

    Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY…

  3. CVE-2021-3129

    RansomwareAdded · due

    Laravel Ignition File Upload Vulnerability

    Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works