CVE-2021-21263
2 advisories.
Packagist/laravel/framework CVE-2021-21263: high 7.2
Query Binding Exploitation
Action: Upgrade laravel/framework to 6.20.11 or later.
composer require laravel/framework:8.22.1composer require laravel/framework:6.20.11composer require laravel/framework:7.30.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.22.1 | - |
| 6.0.0 | 6.20.11 | - |
| 7.0.0 | 7.30.2 | - |
Fixed versions
| 8.22.1 | 6.20.11 | 7.30.2 |
Sources
- osv: GHSA-3p32-j457-pg5x
- https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x
- https://nvd.nist.gov/vuln/detail/CVE-2021-21263
- https://github.com/laravel/framework/pull/35865
- https://blog.laravel.com/security-laravel-62011-7302-8221-released
- https://blog.laravel.com/security-laravel-62012-7303-released
- https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/database/CVE-2021-21263.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-21263.yaml
- https://packagist.org/packages/illuminate/database
- https://packagist.org/packages/laravel/framework
CVE-2021-21263 · published · modified · JSON
Packagist/illuminate/database CVE-2021-21263: high 7.2
Query Binding Exploitation
Action: Upgrade illuminate/database to 6.20.12 or later.
composer require illuminate/database:7.30.3composer require illuminate/database:8.22.1composer require illuminate/database:6.20.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.30.3 | - |
| 8.0.0 | 8.22.1 | - |
| 6.0.0 | 6.20.12 | - |
Fixed versions
| 7.30.3 | 8.22.1 | 6.20.12 |
Sources
- osv: GHSA-3p32-j457-pg5x#Packagist/illuminate/database
- https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x
- https://nvd.nist.gov/vuln/detail/CVE-2021-21263
- https://github.com/laravel/framework/pull/35865
- https://blog.laravel.com/security-laravel-62011-7302-8221-released
- https://blog.laravel.com/security-laravel-62012-7303-released
- https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/database/CVE-2021-21263.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-21263.yaml
- https://packagist.org/packages/illuminate/database
- https://packagist.org/packages/laravel/framework
CVE-2021-21263 · published · modified · JSON