Laravel Cookie serialization vulnerability

2024-05-1521:56:10

Google

osv.dev

laravel

security

upgrade

advisory

encryption

7.1 High

AI Score

Confidence

Low

JSON

Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to laravel advisory for more details and read the notes carefully when upgrading your application.

CPENameOperatorVersion
illuminate/cookieeq5.6.17
illuminate/cookieeq5.6.16
illuminate/cookieeq5.5.40
illuminate/cookieeq5.5.35
illuminate/cookieeq5.5.17
illuminate/cookieeq5.5.43
illuminate/cookieeq5.6.9
illuminate/cookieeq5.6.11
illuminate/cookieeq5.6.15
illuminate/cookieeq5.6.3

Name	Operator	Version
illuminate/cookie	eq	5.6.17
illuminate/cookie	eq	5.6.16
illuminate/cookie	eq	5.5.40
illuminate/cookie	eq	5.5.35
illuminate/cookie	eq	5.5.17
illuminate/cookie	eq	5.5.43
illuminate/cookie	eq	5.6.9
illuminate/cookie	eq	5.6.11
illuminate/cookie	eq	5.6.15
illuminate/cookie	eq	5.6.3

Rows per page:

1-10 of 441

References

github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2018-08-08-1.yaml

github.com/illuminate/cookie

laravel.com/docs/5.6/upgrade#upgrade-5.6.30

7.1 High

AI Score

Confidence

Low

JSON