{"action":"Upgrade laravel/framework to 6.20.26 or later.","affected":[{"fixed":"8.40.0","introduced":"8.0.0"},{"fixed":"6.20.26","introduced":"0"}],"component":"laravel/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.40.0","6.20.26"],"ghsa_id":"GHSA-4mg9-vhxq-vm7j","id":"tcs_01M5KEV4939XC2D4AQKSE5MWKA","modified_at":"2024-12-02T05:40:15.245335Z","published_at":"2021-04-29T21:52:53Z","references":["https://osv.dev/vulnerability/GHSA-4mg9-vhxq-vm7j","https://github.com/laravel/framework/security/advisories/GHSA-4mg9-vhxq-vm7j","https://github.com/laravel/framework","https://packagist.org/packages/illuminate/database","https://packagist.org/packages/laravel/framework"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-4mg9-vhxq-vm7j","url":"https://osv.dev/vulnerability/GHSA-4mg9-vhxq-vm7j"}],"summary":"SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database"}