Packagist/laravel/framework: high
laravel framework SQL Injection via limit and offset functions
Action: Upgrade laravel/framework to 6.20.26 or later.
composer require laravel/framework:6.20.26composer require laravel/framework:7.30.5composer require laravel/framework:8.40.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.20.26 | - |
| 7.0.0 | 7.30.5 | - |
| 8.0.0 | 8.40.0 | - |
Fixed versions
| 6.20.26 | 7.30.5 | 8.40.0 |
Sources
- osv: GHSA-wq8p-mqvg-2p5h
- https://github.com/laravel/framework/security/advisories/GHSA-4mg9-vhxq-vm7j
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2021-04-28.yaml
- https://github.com/laravel/framework
published · modified · JSON