{"action":"Upgrade laravel/framework to 4.1.26 or later.","affected":[{"fixed":"4.1.26","introduced":"4.0.0"}],"component":"laravel/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.1.26"],"ghsa_id":"GHSA-p62r-7637-3wwc","id":"tcs_01M5KF62SCG3TTDDXKT6BRHVYN","modified_at":"2024-11-29T05:26:31.327092Z","published_at":"2024-05-15T22:06:42Z","references":["https://osv.dev/vulnerability/GHSA-p62r-7637-3wwc","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2014-04-15.yaml","https://github.com/laravel/framework","https://laravel.com/docs/5.3/upgrade#upgrade-4.1.26"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-p62r-7637-3wwc","url":"https://osv.dev/vulnerability/GHSA-p62r-7637-3wwc"}],"summary":"Laravel Hijacked authentication cookies vulnerability"}