Packagist/laravel/framework: medium
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Action: Upgrade laravel/framework to 5.5.40 or later.
composer require laravel/framework:5.5.40composer require laravel/framework:5.6.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.5.40 | - |
| 5.6.0 | 5.6.15 | - |
Fixed versions
| 5.5.40 | 5.6.15 |
Sources
- osv: GHSA-7852-w36x-6mf6
- https://github.com/laravel/framework/commit/28e53f23a76206fb130e9a54eb95aa3f010e79c9
- https://github.com/laravel/framework/commit/886d261df0854426b4662b7ed5db6a1c575a4279
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml
- https://github.com/laravel/framework
- https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0
published · modified · JSON