Composer illuminate/database has 8 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-21263 | Query Binding Exploitation | high | 7.2 | >=7.0.0 and <7.30.3 or >=8.0.0 and <8.22.1 or >=6.0.0 and <6.20.12 | 7.30.3, 8.22.1, 6.20.12 |
| CVE-2020-24940 | Guard bypass in Eloquent models affecting Laravel illuminate database component | high | 7.5 | >=5.5.0 and <=5.5.44 or >=6.0.0 and <6.18.34 or >=7.0.0 and <7.23.2 | 6.18.34, 7.23.2 |
| GHSA-x7p5-p2c9-phvg | Unexpected database bindings | high | 7.2 | <6.20.14 or >=7.0.0 and <7.30.4 or >=8.0.0 and <8.24.0 | 6.20.14, 7.30.4, 8.24.0 |
| 2014-05-20 | Risk of mass-assignment vulnerabilities | unknown | 0.0 | >=4.0.0 and <4.0.99 or >=4.1.0 and <4.1.29 | 4.0.99, 4.1.29 |
| 2021-01-21 | Unexpected bindings in QueryBuilder | unknown | 0.0 | >=6.0.0 and <6.20.14 or >=7.0.0 and <7.30.4 or >=8.0.0 and <8.24.0 | 6.20.14, 7.30.4, 8.24.0 |
| 2021-04-28 | SQL Server LIMIT / OFFSET SQL Injection | unknown | 0.0 | >=6.0.0 and <6.20.26 or >=7.0.0 and <7.30.5 or >=8.0.0 and <8.40.0 | 6.20.26, 8.40.0 |
| GHSA-4mg9-vhxq-vm7j | SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database | high | 0.0 | >=8.0.0 and <8.40.0 or <6.20.26 | 8.40.0, 6.20.26 |
| GHSA-cc2w-ghc5-m5qr | Laravel Risk of mass-assignment vulnerabilities | medium | 0.0 | >=4.0.0 and <4.1.29 | 4.1.29 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked