Laravel · Laravel · CVE-2025-27515
**Name of the Vulnerable Software and Affected Versions**
Laravel versions prior to 11.44.1
Laravel versions prior to 12.1.1
**Description**
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules.
**Recommendations**
For versions prior to 11.44.1, update to version 11.44.1 or later.
For versions prior to 12.1.1, update to version 12.1.1 or later.
As a temporary workaround, consider restricting the use of wildcard validation for file or image fields until a patch is available.