GitHub Advisoryadvisory · Packagist
GHSA-6jvx-8ch9-j2jr Laravel Cookie serialization vulnerability
HIGH
Official page ↗
- Ecosystem
- Packagist
- Packages
- laravel/framework
- Severity
- High
- Weaknesses
- CWE-502
- Reviewed
- 2024-05-15
Affected packages
• Packagist laravel/framework: >= 5.5.0, < 5.6.30 → fixed in 5.6.30
Description
Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to laravel advisory for more details and read the notes carefully when upgrading your application.
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness