SQL Server LIMIT / OFFSET SQL Injection

PKSA-hd7s-dt46-m6bk

Affected version: >=6.0.0,<6.20.26|>=7.0.0,<7.30.5|>=8.0.0,<8.40.0

Reported by:
FriendsOfPHP/security-advisories

[HIGH] Unexpected bindings in QueryBuilder

PKSA-f9c1-b1dw-jn5z GHSA-x7p5-p2c9-phvg

Affected version: >=6.0.0,<6.20.14|>=7.0.0,<7.30.4|>=8.0.0,<8.24.0

Reported by:
GitHub, FriendsOfPHP/security-advisories

Guard bypass in Eloquent models

PKSA-zrgd-gjq7-6ykr CVE-2020-24940

Affected version: >=5.5.0,<=5.5.44|>=6.0.0,<6.18.34|>=7.0.0,<7.23.2

Reported by:
FriendsOfPHP/security-advisories

[HIGH] Unexpected bindings in QueryBuilder

PKSA-7pr6-8x55-t8hc CVE-2021-21263 GHSA-3p32-j457-pg5x

Affected version: >=6.0.0,<6.20.12|>=7.0.0,<7.30.3|>=8.0.0,<8.22.1

Reported by:
GitHub, FriendsOfPHP/security-advisories

[HIGH] Risk of mass-assignment vulnerabilities

PKSA-htw6-dk8j-jp9c GHSA-4mg9-vhxq-vm7j

Affected version: >=4.0.0,<4.0.99|>=4.1.0,<4.1.29

Reported by:
GitHub, FriendsOfPHP/security-advisories