backpack/crud

Packagist2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting backpack/crudpage 1 of 1

CVE-2018-20962MEDIUMCVSS 6.1EG 6.1✓ Fixed in 3.4.9
2019-08-08
vulnerable: 0.4.1 ... 3.4.8 (207 versions)
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
CVE-2022-31114MEDIUMCVSS 5.1EG 5.1✓ Fixed in 4.0.63
2026-06-03
vulnerable: 0.4.1 ... v4.0.46 (349 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.69, and 4.0.63 are vulnerable to cross-s…

Check whether backpack/crud is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for backpack/crud CVEs against the assets you own.

Start Free Scan →