{"action":"Upgrade laravel/framework to 10.48.29 or later.","affected":[{"fixed":"12.1.1","introduced":"12.0.0"},{"fixed":"11.44.1","introduced":"11.0.0"},{"fixed":"10.48.29","introduced":"0"}],"component":"laravel/framework","cve_ids":["CVE-2025-27515"],"ecosystem":"Packagist","epss":0.00749,"exploited":false,"fixed_versions":["12.1.1","11.44.1","10.48.29"],"ghsa_id":"GHSA-78fx-h6xr-vch4","id":"tcs_01M5KEXV23QPW8T6Q4QNM3ZF63","modified_at":"2026-09-10T03:49:48.526393935Z","published_at":"2025-03-05T19:09:39Z","references":["https://osv.dev/vulnerability/GHSA-78fx-h6xr-vch4","https://github.com/laravel/framework/security/advisories/GHSA-78fx-h6xr-vch4","https://nvd.nist.gov/vuln/detail/CVE-2025-27515","https://github.com/laravel/framework/commit/2d133034fefddfb047838f4caca3687a3ba811a5","https://github.com/laravel/framework/commit/a4f7a8f9b83e21882abeef78c3174c66b0f4a26b","https://github.com/laravel/framework"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-78fx-h6xr-vch4","url":"https://osv.dev/vulnerability/GHSA-78fx-h6xr-vch4"},{"source":"nvd","source_id":"CVE-2025-27515","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27515"}],"summary":"Laravel has a File Validation Bypass"}