The Illuminate component of Laravel Framework 5.7.x has a deserialization
vulnerability that can lead to remote code execution if the content is
controllable, related to the __destruct method of the PendingCommand class
in PendingCommand.php.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | upstream | noarch | php-laravel-framework | < any | UNKNOWN |