Packagist/illuminate/view CVE-2021-43808: medium 6.1, EPSS 0.83%

Laravel Framework XSS in Blade templating engine

Action: Upgrade illuminate/view to 6.20.42 or later.

composer require illuminate/view:6.20.42

composer require illuminate/view:7.30.6

composer require illuminate/view:8.75.0

Affected

Fixed versions

Sources

• osv: GHSA-66hf-2p6w-jqfw#Packagist/illuminate/view
• https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw
• https://nvd.nist.gov/vuln/detail/CVE-2021-43808
• https://github.com/laravel/framework/pull/39906
• https://github.com/laravel/framework/pull/39908
• https://github.com/laravel/framework/pull/39909
• https://github.com/laravel/framework/commit/b8174169b1807f36de1837751599e2828ceddb9b
• https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/CVE-2021-43808.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-43808.yaml
• https://github.com/laravel/framework
• https://github.com/laravel/framework/releases/tag/v6.20.42
• https://github.com/laravel/framework/releases/tag/v7.30.6
• https://github.com/laravel/framework/releases/tag/v8.75.0

CVE-2021-43808 · published 2021-12-08T19:57:36Z · modified 2026-07-08T06:27:53.544025785Z · JSON