{"action":"Upgrade illuminate/cookie to 6.18.31 or later.","affected":[{"fixed":"6.18.31","introduced":"4.1.0"},{"fixed":"7.22.4","introduced":"7.0.0"}],"component":"illuminate/cookie","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["6.18.31","7.22.4"],"ghsa_id":"GHSA-2ffv-r4r9-r8xr","id":"tcs_01M5KERX5J7FMZKD1D9VG2TQ2F","modified_at":"2024-11-29T05:49:05.109286Z","published_at":"2024-05-15T21:52:29Z","references":["https://osv.dev/vulnerability/GHSA-2ffv-r4r9-r8xr","https://blog.laravel.com/laravel-cookie-security-releases","https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2020-07-27-1.yaml","https://github.com/illuminate/cookie"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-2ffv-r4r9-r8xr","url":"https://osv.dev/vulnerability/GHSA-2ffv-r4r9-r8xr"}],"summary":"Laravel RCE vulnerability in \"cookie\" session driver"}