{"action":"Upgrade laravel/framework to 6.20.42 or later.","affected":[{"fixed":"6.20.42","introduced":"0"},{"fixed":"7.30.6","introduced":"7.0.0"},{"fixed":"8.75.0","introduced":"8.0.0"}],"component":"laravel/framework","cve_ids":["CVE-2021-43808"],"ecosystem":"Packagist","epss":0.00825,"exploited":false,"fixed_versions":["6.20.42","7.30.6","8.75.0"],"ghsa_id":"GHSA-66hf-2p6w-jqfw","id":"tcs_01M5KEWR63WB6EYRJ7EAE5YN1D","modified_at":"2026-07-08T06:27:53.544025785Z","published_at":"2021-12-08T19:57:36Z","references":["https://osv.dev/vulnerability/GHSA-66hf-2p6w-jqfw","https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw","https://nvd.nist.gov/vuln/detail/CVE-2021-43808","https://github.com/laravel/framework/pull/39906","https://github.com/laravel/framework/pull/39908","https://github.com/laravel/framework/pull/39909","https://github.com/laravel/framework/commit/b8174169b1807f36de1837751599e2828ceddb9b","https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/CVE-2021-43808.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-43808.yaml","https://github.com/laravel/framework","https://github.com/laravel/framework/releases/tag/v6.20.42","https://github.com/laravel/framework/releases/tag/v7.30.6","https://github.com/laravel/framework/releases/tag/v8.75.0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-66hf-2p6w-jqfw","url":"https://osv.dev/vulnerability/GHSA-66hf-2p6w-jqfw"}],"summary":"Laravel Framework XSS in Blade templating engine"}