{"action":"Upgrade laravel/framework to 6.18.31 or later.","affected":[{"fixed":"6.18.31","introduced":"4.1.0"},{"fixed":"7.22.4","introduced":"7.0.0"}],"component":"laravel/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["6.18.31","7.22.4"],"ghsa_id":"GHSA-qm5c-m76r-2hfr","id":"tcs_01M5KF7DF7WN8Z6KXAGY38DH91","modified_at":"2024-11-29T05:40:19.902767Z","published_at":"2024-05-15T22:16:52Z","references":["https://osv.dev/vulnerability/GHSA-qm5c-m76r-2hfr","https://blog.laravel.com/laravel-cookie-security-releases","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2020-07-27-1.yaml","https://github.com/laravel/framework"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-qm5c-m76r-2hfr","url":"https://osv.dev/vulnerability/GHSA-qm5c-m76r-2hfr"}],"summary":"Laravel RCE vulnerability in \"cookie\" session driver"}