Packagist/illuminate/cookie: critical
Laravel RCE vulnerability in "cookie" session driver
Action: Upgrade illuminate/cookie to 6.18.31 or later.
composer require illuminate/cookie:6.18.31composer require illuminate/cookie:7.22.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 6.18.31 | - |
| 7.0.0 | 7.22.4 | - |
Fixed versions
| 6.18.31 | 7.22.4 |
Sources
- osv: GHSA-2ffv-r4r9-r8xr
- https://blog.laravel.com/laravel-cookie-security-releases
- https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2020-07-27-1.yaml
- https://github.com/illuminate/cookie
published · modified · JSON