Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Laravel Framework could let attackers execute code
published 3 months ago
Summary
The Laravel web application framework has a security weakness that could allow a malicious user to run unwanted code on your server. The issue has been fixed in the updated version 5.4.36-p3+tuxcare. Upgrade to this version as soon as possible to protect your site.
What to do
- Update laravel laravel/framework to version 5.4.36-p3+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Packagist | laravel | laravel/framework |
< 5.4.36-p3+tuxcare Fix: upgrade to 5.4.36-p3+tuxcare
|
Original advisory text
TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.4.36-p3+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Sep 2026
First seen15 Sep 2026
Sources
CLSA-2026-1773362940 · OSV
Track software like this
Free during beta