GHSA-7fjv-25q9-2w88
State Guessing Vulnerability in laravel/socialite
laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in version 2.0.10.
What each source reports
GitHub AdvisoriesNo score
State Guessing Vulnerability in laravel/socialite
laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in version 2.0.10.
- Record
GHSA-7fjv-25q9-2w88- Updated
- 2026-11-02
OSVNo score
State Guessing Vulnerability in laravel/socialite
laravel/socialite versions prior to 2.0.10 are susceptible to a security vulnerability related to state guessing during OAuth authentication. This vulnerability could potentially lead to session hijacking, allowing attackers to compromise user sessions. The issue has been addressed and fixed in version 2.0.10.
- Record
GHSA-7fjv-25q9-2w88- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
laravel/socialitePackagist | 1.0.0 up to 2.0.10 | 2.0.10 |
laravel/socialitePackagist | 1.0.0 up to 2.0.10, plus listed versions v1.0.0v1.0.1v1.0.2v1.0.3v2.0.0 Show 9 moreShow lessv2.0.1v2.0.2v2.0.3v2.0.4v2.0.5v2.0.6v2.0.7v2.0.8v2.0.9 | 2.0.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-7fjv-25q9-2w88 is a vulnerability with no CVSS score yet in laravel/socialite, published May 15, 2024. No source lists public exploit code. Fixed in laravel/socialite 2.0.10.