laravel/framework Security Advisories for v4.1.20 (9)
-
[HIGH] Laravel Framework RCE Vulnerability
PKSA-3qhw-gzjt-j63j CVE-2018-15133 GHSA-qvqm-h22r-4cp9
Affected version: >=5.6.0,<=5.6.29|<=5.5.40
Reported by:
GitHub -
[HIGH] OS Command Injection in Laravel Framework
PKSA-17kp-jm2n-vxzz CVE-2020-19316 GHSA-w2pm-r78h-4m7v
Affected version: <5.8.17
Reported by:
GitHub -
[HIGH] Improper Input Validation in Laravel
PKSA-7ywf-hktb-jkn9 CVE-2020-24941 GHSA-w68r-5p45-5rqp
Affected version: >=7.0.0,<7.24.0|<6.18.35
Reported by:
GitHub -
[MEDIUM] Possible cross-site scripting (XSS) vulnerability in the Blade templating engine
PKSA-njrm-6dtg-m2pc CVE-2021-43808 GHSA-66hf-2p6w-jqfw
Affected version: <6.20.42|>=7.0.0,<7.30.6|>=8.0.0,<8.75.0
Reported by:
GitHub, FriendsOfPHP/security-advisories -
RCE vulnerability in "cookie" session driver
Affected version: >=4.1.0,<=4.1.99999|>=4.2.0,<=4.2.99999|>=5.0.0,<=5.0.99999|>=5.1.0,<=5.1.99999|>=5.2.0,<=5.2.99999|>=5.3.0,<=5.3.99999|>=5.4.0,<=5.4.99999|>=5.5.0,<=5.5.49|>=5.6.0,<=5.6.99999|>=5.7.0,<=5.7.99999|>=5.8.0,<=5.8.99999|>=6.0.0,<6.18.31|>=7.0.0,<7.22.4
Reported by:
FriendsOfPHP/security-advisories -
Cookie serialization vulnerability
Affected version: >=4.0.0,<=4.0.11|>=4.1.0,<=4.1.31|>=4.2.0,<=4.2.22|>=5.0.0,<=5.0.35|>=5.1.0,<=5.1.46|>=5.2.0,<=5.2.45|>=5.3.0,<=5.3.31|>=5.4.0,<=5.4.36|>=5.5.0,<5.5.42|>=5.6.0,<5.6.30
Reported by:
FriendsOfPHP/security-advisories -
[HIGH] Exploit of encryption failure vulnerability
PKSA-cn77-7mny-v9zg GHSA-4mg9-vhxq-vm7j
Affected version: >=4.0.0,<=4.0.11|>=4.1.0,<=4.1.31|>=4.2.0,<=4.2.22|>=5.0.0,<=5.0.35|>=5.1.0,<=5.1.46|>=5.2.0,<=5.2.45|>=5.3.0,<=5.3.31|>=5.4.0,<=5.4.36|>=5.5.0,<5.5.40|>=5.6.0,<5.6.15
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[HIGH] Risk of mass-assignment vulnerabilities
PKSA-4d28-pz9s-51zj GHSA-x7p5-p2c9-phvg
Affected version: >=4.0.0,<4.0.99|>=4.1.0,<4.1.29
Reported by:
GitHub, FriendsOfPHP/security-advisories -
Hijacked authentication cookies vulnerability
Affected version: >=4.0.0,<4.0.99|>=4.1.0,<4.1.26
Reported by:
FriendsOfPHP/security-advisories