Packagist/illuminate/encryption: low
Laravel Encrypter Failure to decryption vulnerability
Action: Upgrade illuminate/encryption to 5.5.40 or later.
composer require illuminate/encryption:5.5.40composer require illuminate/encryption:5.6.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.0 | 5.5.40 | - |
| 5.6.0 | 5.6.15 | - |
Fixed versions
| 5.5.40 | 5.6.15 |
Sources
- osv: GHSA-6wjw-qf87-fv5v
- https://github.com/illuminate/encryption/commit/51667a52bd7d135c6aa40a897656ffe9d3cd072d
- https://github.com/illuminate/encryption/commit/c80b1da6a0412bd74bd56dc80f6126f561631b05
- https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/encryption/2018-03-30-1.yaml
- https://github.com/illuminate/encryption
- https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0
published · modified · JSON