We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2020-36950

CVE-2020-36950

Laravel

Severity: MEDIUM
CVSS: 6.5CVSS
Published: 2026-01-27
Last modified: 2026-01-29
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-770

Description

Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server.

References

https://nova.laravel.com/
https://nova.laravel.com/releases
https://www.exploit-db.com/exploits/49198
https://www.vulncheck.com/advisories/laravel-nova-range-dos

Summary

Description

References