Packagist/laravel/framework: critical 9.9
Laravel RCE vulnerability in "cookie" session driver
Action: Upgrade laravel/framework to 6.18.31 or later.
composer require laravel/framework:6.18.31composer require laravel/framework:7.22.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 6.18.31 | - |
| 7.0.0 | 7.22.4 | - |
Fixed versions
| 6.18.31 | 7.22.4 |
Sources
- osv: GHSA-qm5c-m76r-2hfr
- https://blog.laravel.com/laravel-cookie-security-releases
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2020-07-27-1.yaml
- https://github.com/laravel/framework
published · modified · JSON