nasirkhan/laravel-starter

Packagist1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting nasirkhan/laravel-starterpage 1 of 1

CVE-2025-26159MEDIUMCVSS 6.1EG 6.1✓ Fixed in 11.11.0
2025-04-22
vulnerable: v1.0.0 ... v9.16.0 (62 versions)
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.

Check whether nasirkhan/laravel-starter is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for nasirkhan/laravel-starter CVEs against the assets you own.

Start Free Scan →