GHSA-6jvx-8ch9-j2jr
Laravel Cookie serialization vulnerability
En bref
- Publiée
- Mise à jour
Description
Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to [laravel advisory](https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30) for more details and read the notes carefully when upgrading your application.
Paquets affectés
| Paquet | Versions |
|---|---|
| Packagist · laravel/framework | introduced 5.5.0, fixed 5.6.30 |
Références
- https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-08-08-1.yaml WEB
- https://github.com/laravel/framework PACKAGE
- https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |