{"action":"Upgrade laravel/framework to 5.5.40 or later.","affected":[{"fixed":"5.5.40","introduced":"0"},{"fixed":"5.6.15","introduced":"5.6.0"}],"component":"laravel/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.5.40","5.6.15"],"ghsa_id":"GHSA-7852-w36x-6mf6","id":"tcs_01M5KEXTP93E3Q26PRJF64EM7A","modified_at":"2024-11-29T05:40:57.344982Z","published_at":"2024-05-15T22:08:06Z","references":["https://osv.dev/vulnerability/GHSA-7852-w36x-6mf6","https://github.com/laravel/framework/commit/28e53f23a76206fb130e9a54eb95aa3f010e79c9","https://github.com/laravel/framework/commit/886d261df0854426b4662b7ed5db6a1c575a4279","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml","https://github.com/laravel/framework","https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7852-w36x-6mf6","url":"https://osv.dev/vulnerability/GHSA-7852-w36x-6mf6"}],"summary":"Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior"}