Security Advisories - laravel/framework - Packagist

laravel/framework Security Advisories for v8.40.0 (2)

Image upload bypass

PKSA-p3rx-dfwp-73ny CVE-2021-43617

Affected version: >=8.0.0,<8.71.0

Reported by:
FriendsOfPHP/security-advisories
[MEDIUM] Possible cross-site scripting (XSS) vulnerability in the Blade templating engine

PKSA-njrm-6dtg-m2pc CVE-2021-43808 GHSA-66hf-2p6w-jqfw

Affected version: <6.20.42|>=7.0.0,<7.30.6|>=8.0.0,<8.75.0

Reported by:
GitHub, FriendsOfPHP/security-advisories