CVE-2025-27515
1 advisory.
Packagist/laravel/framework CVE-2025-27515: critical 9.8, EPSS 0.75%
Laravel has a File Validation Bypass
Action: Upgrade laravel/framework to 10.48.29 or later.
composer require laravel/framework:12.1.1composer require laravel/framework:11.44.1composer require laravel/framework:10.48.29Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.1.1 | - |
| 11.0.0 | 11.44.1 | - |
| 0 | 10.48.29 | - |
Fixed versions
| 12.1.1 | 11.44.1 | 10.48.29 |
Sources
- osv: GHSA-78fx-h6xr-vch4
- nvd: CVE-2025-27515
- https://github.com/laravel/framework/security/advisories/GHSA-78fx-h6xr-vch4
- https://github.com/laravel/framework/commit/2d133034fefddfb047838f4caca3687a3ba811a5
- https://github.com/laravel/framework/commit/a4f7a8f9b83e21882abeef78c3174c66b0f4a26b
- https://github.com/laravel/framework
CVE-2025-27515 · published · modified · JSON