{"action":"Upgrade laravel/framework to 6.20.44 or later.","affected":[{"fixed":"6.20.44","introduced":"5.7.0"}],"component":"laravel/framework","cve_ids":["CVE-2019-9081"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["6.20.44"],"ghsa_id":"GHSA-pfg4-p438-p874","id":"tcs_01M5KF6AGFHXGMZN9N5BBXCR61","modified_at":"2024-02-16T08:24:40.221686Z","published_at":"2022-05-14T01:31:22Z","references":["https://osv.dev/vulnerability/GHSA-pfg4-p438-p874","https://nvd.nist.gov/vuln/detail/CVE-2019-9081","https://github.com/Laworigin/Laworigin.github.io/blob/master/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce/index.html","https://github.com/laravel/framework","https://github.com/laravel/framework/discussions/40184","https://laworigin.github.io/2019/02/21/laravelv5-7%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96rce"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pfg4-p438-p874","url":"https://osv.dev/vulnerability/GHSA-pfg4-p438-p874"}],"summary":"Laravel Framework Deserialization Vulnerability"}