Laravel Holdings Inc. Vulnerabilities and Affected Products
Vulnerabilities associated with Laravel Nova.
Products
Clear product- Laravel Framework2 vulnerabilities
- Laravel Nova1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-36950HIGH | Laravel Nova 3.7.0 - 'range' DoSLaravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server. CWE-770Jan 27, 2026 | CVSS8.7v4.0 | EPSS0.316% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |