[MEDIUM] Laravel has a File Validation Bypass

PKSA-8qx3-n5y5-vvnd CVE-2025-27515 GHSA-78fx-h6xr-vch4

Affected version: <10.48.29|>=11.0.0,<11.44.1|>=12.0.0,<12.1.1

Reported by:
GitHub

[MEDIUM] Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page

PKSA-q46n-4fdk-zjr4 CVE-2024-13919 GHSA-83wp-f5c3-hqqr

Affected version: >=11.9.0,<11.36.0

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

PKSA-qzrn-rnz3-85w1 CVE-2024-13918 GHSA-546h-56qp-8jmw

Affected version: >=11.9.0,<11.36.0

Reported by:
GitHub, FriendsOfPHP/security-advisories