laradashboard vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202617

Newest CVEs

• CVE-2026-120488

  LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content

  LaraDashboard · LaraDashboard

  Medium5.1
• CVE-2026-120487

  LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades

  LaraDashboard · LaraDashboard

  High8.6
• CVE-2026-120450

  LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool

  LaraDashboard · LaraDashboard

  Medium5.3
• CVE-2026-105130

  LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

  laradashboard · laradashboard

  Medium6.3
• CVE-2026-105129

  LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

  laradashboard · laradashboard

  High7.1
• CVE-2026-105128

  LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url

  laradashboard · laradashboard

  Medium5.3
• CVE-2026-105127

  LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

  laradashboard · laradashboard

  Medium6.9
• CVE-2026-105126

  LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

  laradashboard · laradashboard

  High8.6
• CVE-2026-105125

  LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

  laradashboard · laradashboard

  Medium6.3
• CVE-2026-90933

  laradashboard through 1.2.2 Missing Authorization via License API

  laradashboard · laradashboard

  High7.1