SQLi

SQL Injection: An Elite Bug Bounty Hunter's Field Manual SQL...

EUVD-2021-1211

Malware in sbrugna...

BIT-LARAVEL-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

GHSA-W68R-5P45-5RQP Improper Input Validation in Laravel

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

Improper Input Validation in Laravel

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

Object Injection

laravel/framework is vulnerable to object injection. The vulnerability exists when the $guarded property is used on models, as a nested expression in a JSON column can bypass the guarded condition...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

Code injection

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...

CVE-2020-24941

The CVE-2020-24941 vulnerability affects Laravel framework prior to 6.18.35 and 7.x prior to 7.24.0, where the $guarded property is mishandled in certain requests with JSON column nesting expressions. The issue’s root cause is a mishandling of guarded on models when nested JSON expressions are in...

CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions...