laravel Vulnerabilities and Affected Products
Vulnerabilities associated with Laravel Valet.
Products
Clear product- framework5 vulnerabilities
- Laravel Framework4 vulnerabilities
- livewire3 vulnerabilities
- reverb2 vulnerabilities
- Ignition1 vulnerability
- Laravel Valet1 vulnerability
- passport1 vulnerability
- pulse1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-47756HIGH | Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication. CWE-732Jan 15, 2026 | CVSS8.4v4.0 | EPSS0.183% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |