{"id":"CVE-2021-21263","aliases":["BIT-laravel-2021-21263","CLSA-2025-1765932544","CLSA-2026-1772239984","CLSA-2026-1772326385","CLSA-2026-1773017339","CLSA-2026-1773103741","CLSA-2026-1773103742","CLSA-2026-1773103743","CLSA-2026-1773362940","CLSA-2026-1774486145","CLSA-2026-1776213253","CLSA-2026-1776213254","CLSA-2026-1776213257","DEBIAN-CVE-2021-21263","EUVD-2021-0484","GHSA-3p32-j457-pg5x","GHSA-4mg9-vhxq-vm7j","GHSA-7852-w36x-6mf6","GHSA-jwvj-pwww-3mj5","GHSA-wq8p-mqvg-2p5h","GHSA-x7p5-p2c9-phvg"],"status":"published","title":"Query Binding Exploitation in Laravel","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01625,"percentile":0.76456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1240","CWE-74","CWE-89"],"published":"2021-01-19T19:36:51Z","modified":"2026-10-24T10:50:23Z","fixes":[{"ecosystem":"Packagist","package":"laravel/framework","fixed_in":["8.22.1","6.20.11","7.30.2","8.40.0","6.20.26","5.5.40","5.6.15","6.20.14","7.30.4","8.24.0","7.30.5"],"sources":["ghsa","osv"]},{"ecosystem":"Packagist","package":"illuminate/database","fixed_in":["7.30.3","8.22.1","6.20.12","8.40.0","6.20.26","6.20.14","7.30.4","8.24.0"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"laravel","fixed_in":["6.20.11","7.30.2","8.22.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Packagist","package":"illuminate/database","fixed_in":["5.4.36-p1+tuxcare","5.4.36-p2+tuxcare"],"sources":["osv"]},{"ecosystem":"TuxCare:Packagist","package":"laravel/framework","fixed_in":["5.4.36-p3+tuxcare","8.12.0-p1+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"php-laravel-framework","fixed_in":["6.20.11+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"php-laravel-framework","fixed_in":["6.20.11+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"php-laravel-framework","fixed_in":["6.20.11+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.22.1"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.3"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.22.1"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.12"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.11"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.2"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.0"},{"fixed":"5.6.15"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.14"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.5"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.14"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.14"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"laravel","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.20.11"},{"introduced":"7.0.0"},{"fixed":"7.30.2"},{"introduced":"8.0.0"},{"fixed":"8.22.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.38"},{"fixed":"5.8.38-p1+tuxcare"}]}],"versions":["5.8.38"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p1+tuxcare"}]}],"versions":["5.4.36"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p2+tuxcare"}]}],"versions":["5.4.36","5.4.36-p1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p2+tuxcare"}]}],"versions":["5.4.36","5.4.36-p1+tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.50"},{"fixed":"5.5.50-p1+tuxcare"}]}],"versions":["5.5.50"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.40"},{"fixed":"5.6.40-p1+tuxcare"}]}],"versions":["5.6.40"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.29"},{"fixed":"5.7.29-p1+tuxcare"}]}],"versions":["5.7.29"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p3+tuxcare"}]}],"versions":["5.4.36","5.4.36-p1+tuxcare","5.4.36-p2+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.0"},{"fixed":"8.12.0-p1+tuxcare"}]}],"versions":["8.12.0"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.1"},{"fixed":"8.12.1-p1+tuxcare"}]}],"versions":["8.12.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.2"},{"fixed":"8.12.2-p1+tuxcare"}]}],"versions":["8.12.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.3"},{"fixed":"8.12.3-p1+tuxcare"}]}],"versions":["8.12.3"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.11+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.11+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.11+dfsg-1"}]}]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.22.1"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.3"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.22.1"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.12"}]}],"versions":["v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.2","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.11"}]}],"versions":["v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.2","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.2"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.40","v5.5.41","v5.5.42","v5.5.43","v5.5.44","v5.5.45","v5.5.46","v5.5.47","v5.5.48","v5.5.49","v5.5.5","v5.5.50","v5.5.6","v5.5.7","v5.5.8","v5.5.9","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.18","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.40","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.12","v5.7.13","v5.7.14","v5.7.15","v5.7.16","v5.7.17","v5.7.18","v5.7.19","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.24","v5.7.25","v5.7.26","v5.7.27","v5.7.28","v5.7.29","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.1","v5.8.10","v5.8.11","v5.8.12","v5.8.13","v5.8.14","v5.8.15","v5.8.16","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.21","v5.8.22","v5.8.23","v5.8.24","v5.8.25","v5.8.26","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.37","v5.8.38","v5.8.4","v5.8.5","v5.8.6","v5.8.7","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}],"versions":["5.7.17","5.7.18","5.7.19","v1.0.0","v1.1.0","v1.1.1","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0-BETA1","v4.2.1","v4.2.12","v4.2.16","v4.2.17","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.22","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.33","v5.0.4","v5.1.1","v5.1.13","v5.1.16","v5.1.2","v5.1.20","v5.1.22","v5.1.25","v5.1.28","v5.1.30","v5.1.31","v5.1.41","v5.1.6","v5.1.8","v5.2.0","v5.2.19","v5.2.21","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.31","v5.2.32","v5.2.37","v5.2.43","v5.2.45","v5.2.6","v5.2.7","v5.3.0","v5.3.16","v5.3.23","v5.3.4","v5.4.0","v5.4.13","v5.4.17","v5.4.19","v5.4.27","v5.4.36","v5.4.9","v5.5.0","v5.5.16","v5.5.17","v5.5.2","v5.5.28","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.39","v5.5.40","v5.5.41","v5.5.43","v5.5.44","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.15","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.26","v5.7.27","v5.7.28","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.11","v5.8.12","v5.8.14","v5.8.15","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.22","v5.8.24","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.4","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.5","v5.5.6","v5.5.7","v5.5.8","v5.5.9"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.0"},{"fixed":"5.6.15"}]}],"versions":["v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.2","v5.6.3","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.14"}]}],"versions":["v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.2","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.26"}]}],"versions":["v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.5"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.30.4","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.14"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.40","v5.5.41","v5.5.42","v5.5.43","v5.5.44","v5.5.45","v5.5.46","v5.5.47","v5.5.48","v5.5.49","v5.5.5","v5.5.50","v5.5.6","v5.5.7","v5.5.8","v5.5.9","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.18","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.40","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.12","v5.7.13","v5.7.14","v5.7.15","v5.7.16","v5.7.17","v5.7.18","v5.7.19","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.24","v5.7.25","v5.7.26","v5.7.27","v5.7.28","v5.7.29","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.1","v5.8.10","v5.8.11","v5.8.12","v5.8.13","v5.8.14","v5.8.15","v5.8.16","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.21","v5.8.22","v5.8.23","v5.8.24","v5.8.25","v5.8.26","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.37","v5.8.38","v5.8.4","v5.8.5","v5.8.6","v5.8.7","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.2","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.14"}]}],"versions":["5.7.17","5.7.18","5.7.19","v1.0.0","v1.1.0","v1.1.1","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0-BETA1","v4.2.1","v4.2.12","v4.2.16","v4.2.17","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.22","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.33","v5.0.4","v5.1.1","v5.1.13","v5.1.16","v5.1.2","v5.1.20","v5.1.22","v5.1.25","v5.1.28","v5.1.30","v5.1.31","v5.1.41","v5.1.6","v5.1.8","v5.2.0","v5.2.19","v5.2.21","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.31","v5.2.32","v5.2.37","v5.2.43","v5.2.45","v5.2.6","v5.2.7","v5.3.0","v5.3.16","v5.3.23","v5.3.4","v5.4.0","v5.4.13","v5.4.17","v5.4.19","v5.4.27","v5.4.36","v5.4.9","v5.5.0","v5.5.16","v5.5.17","v5.5.2","v5.5.28","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.39","v5.5.40","v5.5.41","v5.5.43","v5.5.44","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.15","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.26","v5.7.27","v5.7.28","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.11","v5.8.12","v5.8.14","v5.8.15","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.22","v5.8.24","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.4","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.2","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.4"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.24.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.1","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]}],"products":[{"vendor":"flarum","product":"framework"},{"vendor":"laravel","product":"framework"},{"vendor":"laravel","product":"laravel"}],"references":[{"url":"https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://github.com/laravel/framework/pull/35865","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web","fix"]},{"url":"https://blog.laravel.com/security-laravel-62011-7302-8221-released","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web","advisory"]},{"url":"https://packagist.org/packages/laravel/framework","tags":["x_refsource_MISC","x_transferred","Product","Third Party Advisory","web","advisory"]},{"url":"https://packagist.org/packages/illuminate/database","tags":["x_refsource_MISC","x_transferred","Product","Third Party Advisory","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21263","tags":["web","advisory"]},{"url":"https://blog.laravel.com/security-laravel-62012-7303-released","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/database/CVE-2021-21263.yaml","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-21263.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3p32-j457-pg5x","tags":["advisory"]},{"url":"https://github.com/laravel/framework/security/advisories/GHSA-4mg9-vhxq-vm7j","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4mg9-vhxq-vm7j"},{"url":"https://github.com/laravel/framework/commit/28e53f23a76206fb130e9a54eb95aa3f010e79c9","tags":["web"]},{"url":"https://github.com/laravel/framework/commit/886d261df0854426b4662b7ed5db6a1c575a4279","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml","tags":["web"]},{"url":"https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7852-w36x-6mf6"},{"url":"https://github.com/laravel/framework/security/advisories/GHSA-x7p5-p2c9-phvg","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2021-01-21.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jwvj-pwww-3mj5"},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2021-04-28.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wq8p-mqvg-2p5h"},{"url":"https://github.com/advisories/GHSA-x7p5-p2c9-phvg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-21263","tags":["advisory"]},{"url":"https://github.com/laravel/framework","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2021-21263","title":"Query Binding Exploitation in Laravel","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-01-19T19:40:18Z","modified":"2024-08-03T18:09:14.909Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-0484","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-01-19T19:40:18Z","modified":"2024-08-03T18:09:14Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"updated_at":"2026-11-03T03:25:06.913643Z"}],"ghsa":[{"id":"GHSA-3p32-j457-pg5x","title":"Query Binding Exploitation","description":"### Description\n\nLaravel versions \u003c6.20.12, \u003c7.30.3 \u0026 \u003c8.22.1 contain a query binding exploitation.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.\n\nThis vulnerability was discovered by Tim Groenevelt (tim.g@foodbyus.com).\n\n### References\n\n- https://github.com/laravel/framework/pull/35865","status":"published","published":"2021-01-19T19:36:51Z","modified":"2024-02-15T05:07:00Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-74","CWE-89"],"updated_at":"2026-11-02T14:37:38.20753Z"},{"id":"GHSA-x7p5-p2c9-phvg","title":"Unexpected database bindings","description":"This is a follow-up to the previous security advisory (GHSA-3p32-j457-pg5x) which addresses a few additional edge cases.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-02-02T15:47:08Z","modified":"2023-01-09T05:04:06Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:36:08.267721Z"},{"id":"GHSA-4mg9-vhxq-vm7j","title":"SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database","description":"### Impact\n\nThose using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\n\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\n\nYou may workaround this vulnerability by ensuring that only integers are passed to the `limit` and `offset` functions, as well as the `skip` and `take` functions.\n","status":"published","published":"2021-04-29T21:52:53Z","modified":"2023-01-09T05:04:39Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:36:10.502376Z"},{"id":"GHSA-7852-w36x-6mf6","title":"Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior","description":"The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of `false`. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the application's code, such as the example below:\n\n```\n\u003c?php\n\n$decyptedValue = decrypt($secret);\n\nif ($decryptedValue == '') {\n    // Code is run even though decrypted value is false...\n}\n```","status":"published","published":"2024-05-15T22:08:06Z","modified":"2024-05-15T22:08:07Z","cwes":["CWE-1240"],"updated_at":"2026-11-02T14:37:49.987036Z"},{"id":"GHSA-jwvj-pwww-3mj5","title":"laravel framework Unexpected database bindings via requests","description":"This is a follow-up to the security advisory https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x which addresses a few additional edge cases.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2024-05-15T22:19:51Z","modified":"2024-05-15T22:19:52Z","updated_at":"2026-11-02T14:37:49.987036Z"},{"id":"GHSA-wq8p-mqvg-2p5h","title":"laravel framework SQL Injection via limit and offset functions","description":"### Impact\nThose using SQL Server with Laravel and allowing user input to be passed directly to the limit and offset functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\nYou may workaround this vulnerability by ensuring that only integers are passed to the limit and offset functions, as well as the skip and take functions.","status":"published","published":"2024-05-15T22:20:42Z","modified":"2024-05-15T22:20:43Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:37:49.987036Z"}],"nvd":[{"id":"CVE-2021-21263","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-01-19T20:15:13.3Z","modified":"2026-06-17T03:35:09.03Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-74","CWE-89"],"updated_at":"2026-11-02T14:06:49.284888Z"}],"osv":[{"id":"CVE-2021-21263","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-01-19T20:15:13.3Z","modified":"2026-10-24T10:50:23.474910957Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-21263","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-01-19T20:15:13.3Z","modified":"2026-10-23T18:03:11.538366123Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-3p32-j457-pg5x","title":"Query Binding Exploitation","description":"### Description\n\nLaravel versions \u003c6.20.12, \u003c7.30.3 \u0026 \u003c8.22.1 contain a query binding exploitation.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.\n\nThis vulnerability was discovered by Tim Groenevelt (tim.g@foodbyus.com).\n\n### References\n\n- https://github.com/laravel/framework/pull/35865","status":"published","published":"2021-01-19T19:36:51Z","modified":"2026-09-10T03:49:13.905761438Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-74","CWE-89"],"updated_at":"2026-11-02T15:46:35.747385Z"},{"id":"GHSA-x7p5-p2c9-phvg","title":"Unexpected database bindings","description":"This is a follow-up to the previous security advisory (GHSA-3p32-j457-pg5x) which addresses a few additional edge cases.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2021-02-02T15:47:08Z","modified":"2024-12-02T05:49:41.891932Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:46:59.484835Z"},{"id":"BIT-laravel-2021-21263","title":"Query Binding Exploitation in Laravel","description":"Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2024-03-06T10:55:39.673Z","modified":"2025-05-20T10:02:07.006Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"CLSA-2025-1765932544","title":"TuxCare security update for laravel/framework (5 CVEs)","description":"TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 5.8.38-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:21.320862423Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1772239984","title":"TuxCare security update for illuminate/database (1 CVE)","description":"TuxCare rebuilt illuminate/database to address 1 CVE. Fixed in 5.4.36-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:48:04.681748721Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772326385","title":"TuxCare security update for illuminate/database (1 CVE)","description":"TuxCare rebuilt illuminate/database to address 1 CVE. Fixed in 5.4.36-p2+tuxcare.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:48:04.623390172Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773017339","title":"TuxCare security update for laravel/framework (10 CVEs)","description":"TuxCare rebuilt laravel/framework to address 10 CVEs. Fixed in 5.4.36-p2+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:48:04.641650282Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103741","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 5.5.50-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.485827895Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103742","title":"TuxCare security update for laravel/framework (9 CVEs)","description":"TuxCare rebuilt laravel/framework to address 9 CVEs. Fixed in 5.6.40-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.517840721Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103743","title":"TuxCare security update for laravel/framework (9 CVEs)","description":"TuxCare rebuilt laravel/framework to address 9 CVEs. Fixed in 5.7.29-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.556426054Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773362940","title":"TuxCare security update for laravel/framework (1 CVE)","description":"TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.4.36-p3+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.574878603Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774486145","title":"TuxCare security update for laravel/framework (3 CVEs)","description":"TuxCare rebuilt laravel/framework to address 3 CVEs. Fixed in 8.12.0-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.489601896Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1776213253","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.1-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-10-15T09:47:59.4937507Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776213254","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.2-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-10-15T09:47:59.56692071Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776213257","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.3-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:26Z","modified":"2026-10-15T09:47:59.553230097Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"GHSA-4mg9-vhxq-vm7j","title":"SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database","description":"### Impact\n\nThose using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\n\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\n\nYou may workaround this vulnerability by ensuring that only integers are passed to the `limit` and `offset` functions, as well as the `skip` and `take` functions.\n","status":"published","published":"2021-04-29T21:52:53Z","modified":"2024-12-02T05:40:15.245335Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:37.148947Z"},{"id":"GHSA-7852-w36x-6mf6","title":"Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior","description":"The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of `false`. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the application's code, such as the example below:\n\n```\n\u003c?php\n\n$decyptedValue = decrypt($secret);\n\nif ($decryptedValue == '') {\n    // Code is run even though decrypted value is false...\n}\n```","status":"published","published":"2024-05-15T22:08:06Z","modified":"2024-11-29T05:40:57.344982Z","cwes":["CWE-1240"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"GHSA-jwvj-pwww-3mj5","title":"laravel framework Unexpected database bindings via requests","description":"This is a follow-up to the security advisory https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x which addresses a few additional edge cases.\n\nIf a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.","status":"published","published":"2024-05-15T22:19:51Z","modified":"2024-11-29T05:39:56.521856Z","updated_at":"2026-11-02T15:46:51.10002Z"},{"id":"GHSA-wq8p-mqvg-2p5h","title":"laravel framework SQL Injection via limit and offset functions","description":"### Impact\nThose using SQL Server with Laravel and allowing user input to be passed directly to the limit and offset functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\nYou may workaround this vulnerability by ensuring that only integers are passed to the limit and offset functions, as well as the skip and take functions.","status":"published","published":"2024-05-15T22:20:42Z","modified":"2024-11-29T05:41:40.570199Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:59.131095Z"}]}}