reverb vulnerabilities

1 known vulnerability in reverb from Laravel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  reverb: Deserialization of Untrusted Data

  CVE-2026-23524Jan 21, 2026Laravel

  Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can be instantiate