GitHub Advisoryadvisory · Packagist

GHSA-6jvx-8ch9-j2jr Laravel Cookie serialization vulnerability

HIGH Published 2024-05-15 Modified 2024-05-15 Official page ↗
Ecosystem
Packagist
Packages
laravel/framework
Severity
High
Weaknesses
CWE-502
Reviewed
2024-05-15

Affected packages

• Packagist laravel/framework: >= 5.5.0, < 5.6.30 → fixed in 5.6.30

Description

Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to laravel advisory for more details and read the notes carefully when upgrading your application.

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References