backpack/crud
Packagist11 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting backpack/crudpage 1 of 1
- CVE-2018-20962MEDIUMCVSS 6.1EG 6.1fixed in 3.4.92019-08-08
vulnerable: 0.4.1 ... 3.4.8 (207 versions)
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
- CVE-2022-31114MEDIUMCVSS 5.1EG 5.1fixed in 5.0.13, 4.1.69 or 4.0.63, by version range2026-06-03
vulnerable: 0.4.1 ... v4.0.46 (349 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Versions prior to 5.0.13, 4.1.69, and 4.0.63 are vulnerable to cross-s…
- CVE-2026-54175HIGHCVSS 7.6EG 7.6fixed in 6.8.11 or 7.0.34, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (61 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 6.8.11 and 7.0.34, MyAccountController::postAccountInfoForm i…
- CVE-2026-54176MEDIUMCVSS 6.5EG 6.5fixed in 6.8.14 or 7.0.38, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (38 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, MyAccountController::postAccountIn…
- CVE-2026-54177MEDIUMCVSS 6.6EG 6.6fixed in 6.8.14 or 7.0.38, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (38 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFile…
- CVE-2026-54178HIGHCVSS 8.1EG 8.1fixed in 6.8.12 or 7.0.35, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (35 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 6.8.12 and 7.0.35, HasUploadFields::uploadMultipleFilesToDisk…
- CVE-2026-54179MEDIUMCVSS 4.4EG 4.4fixed in 6.8.14 or 7.0.38, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (38 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/Sing…
- CVE-2026-54180HIGHCVSS 7.6EG 7.6fixed in 6.8.14 or 7.0.38, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (38 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder op…
- CVE-2026-54181MEDIUMCVSS 5.4EG 5.4fixed in 6.8.14 or 7.0.38, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (38 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, src/resources/views/crud/columns/c…
- CVE-2026-54182HIGHCVSS 8.1EG 8.1fixed in 4.1.72, 5.6.2, 6.8.13 or 7.0.36, by version range2026-08-20
vulnerable: 7.0.0 ... 7.0.9 (36 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeC…
- CVE-2026-57570MEDIUMCVSS 6.5EG 6.5fixed in 7.0.47 or 6.8.15, by version range2026-08-20
vulnerable: 6.0.0 ... 6.8.9 (121 versions)
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.15 and 7.0.47, HasMany and MorphMany handling thr…
Check whether backpack/crud is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for backpack/crud CVEs against the assets you own.
Book a Demo →