Packagist/laravel/framework CVE-2021-21263: high 7.2, EPSS 1.63%

Query Binding Exploitation

Action: Upgrade laravel/framework to 6.20.11 or later.

composer require laravel/framework:8.22.1

composer require laravel/framework:6.20.11

composer require laravel/framework:7.30.2

Affected

Fixed versions

Sources

• osv: GHSA-3p32-j457-pg5x
• https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x
• https://nvd.nist.gov/vuln/detail/CVE-2021-21263
• https://github.com/laravel/framework/pull/35865
• https://blog.laravel.com/security-laravel-62011-7302-8221-released
• https://blog.laravel.com/security-laravel-62012-7303-released
• https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/database/CVE-2021-21263.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-21263.yaml
• https://packagist.org/packages/illuminate/database
• https://packagist.org/packages/laravel/framework

CVE-2021-21263 · published 2021-01-19T19:36:51Z · modified 2026-09-10T03:49:13.905761438Z · JSON