{"id":"CVE-2024-52301","aliases":["BIT-laravel-2024-52301","CLSA-2026-1772239984","CLSA-2026-1773017339","CLSA-2026-1773103741","CLSA-2026-1773103742","CLSA-2026-1773103743","CLSA-2026-1773362940","CLSA-2026-1776213253","CLSA-2026-1776213254","CLSA-2026-1776213257","CLSA-2026-1776214146","CLSA-2026-1780015757","DEBIAN-CVE-2024-52301","DLA-3997-1","EUVD-2024-3258","GHSA-4mg9-vhxq-vm7j","GHSA-7852-w36x-6mf6","GHSA-gv7v-rgg6-548h","GHSA-jwvj-pwww-3mj5","GHSA-qm5c-m76r-2hfr","GHSA-wq8p-mqvg-2p5h","GHSA-x7p5-p2c9-phvg"],"status":"published","title":"Laravel allows environment manipulation via query string","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.44757,"percentile":0.9879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-1240","CWE-88","CWE-89"],"published":"2021-04-29T21:52:53Z","modified":"2026-11-02T12:03:08Z","exploits":[{"source":"pocgithub","id":"Nyamort/CVE-2024-52301","title":"Nyamort/CVE-2024-52301","date":"2024-11-14","url":"https://github.com/Nyamort/CVE-2024-52301"},{"source":"pocgithub","id":"martinhaunschmid/CVE-2024-52301-Research","title":"martinhaunschmid/CVE-2024-52301-Research","date":"2024-11-15","url":"https://github.com/martinhaunschmid/CVE-2024-52301-Research"},{"source":"pocgithub","id":"fckoo/nanwinata-CVE-2024-52301","title":"fckoo/nanwinata-CVE-2024-52301","date":"2025-07-18","url":"https://github.com/fckoo/nanwinata-CVE-2024-52301"}],"fixes":[{"ecosystem":"Packagist","package":"laravel/framework","fixed_in":["8.40.0","6.20.26","5.5.40","5.6.15","6.20.45","7.30.7","8.83.28","9.52.17","10.48.23","11.31.0","7.30.5"],"sources":["ghsa","osv"]},{"ecosystem":"Packagist","package":"illuminate/database","fixed_in":["8.40.0","6.20.26"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"laravel","fixed_in":["6.20.45","7.30.7","8.83.28","9.52.17","10.48.23","11.31.0"],"sources":["osv"]},{"ecosystem":"TuxCare:Packagist","package":"illuminate/database","fixed_in":["5.4.36-p1+tuxcare"],"sources":["osv"]},{"ecosystem":"TuxCare:Packagist","package":"laravel/framework","fixed_in":["5.4.36-p3+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"php-laravel-framework","fixed_in":["10.48.25+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"php-laravel-framework","fixed_in":["10.48.25+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"php-laravel-framework","fixed_in":["6.20.14+dfsg-2+deb11u2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.0"},{"fixed":"5.6.15"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.45"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.7"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.83.28"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0"},{"fixed":"9.52.17"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.48.23"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0"},{"fixed":"11.31.0"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.26"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.5"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"laravel","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.20.45"},{"introduced":"7.0.0"},{"fixed":"7.30.7"},{"introduced":"8.0.0"},{"fixed":"8.83.28"},{"introduced":"9.0.0"},{"fixed":"9.52.17"},{"introduced":"10.0.0"},{"fixed":"10.48.23"},{"introduced":"11.0.0"},{"fixed":"11.31.0"}]}]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p1+tuxcare"}]}],"versions":["5.4.36"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p2+tuxcare"}]}],"versions":["5.4.36","5.4.36-p1+tuxcare"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.50"},{"fixed":"5.5.50-p1+tuxcare"}]}],"versions":["5.5.50"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.40"},{"fixed":"5.6.40-p1+tuxcare"}]}],"versions":["5.6.40"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.29"},{"fixed":"5.7.29-p1+tuxcare"}]}],"versions":["5.7.29"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.36"},{"fixed":"5.4.36-p3+tuxcare"}]}],"versions":["5.4.36","5.4.36-p1+tuxcare","5.4.36-p2+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.1"},{"fixed":"8.12.1-p1+tuxcare"}]}],"versions":["8.12.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.2"},{"fixed":"8.12.2-p1+tuxcare"}]}],"versions":["8.12.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.3"},{"fixed":"8.12.3-p1+tuxcare"}]}],"versions":["8.12.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.0"},{"fixed":"8.12.0-p3+tuxcare"}]}],"versions":["8.12.0","8.12.0-p1+tuxcare"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.38"},{"fixed":"5.8.38-p4+tuxcare"}]}],"versions":["5.8.38","5.8.38-p1+tuxcare","5.8.38-p2+tuxcare","5.8.38-p3+tuxcare"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.48.25+dfsg-1","10.48.25+dfsg-2","10.48.29+dfsg-1","11.44.0-1","11.44.2+dfsg-1","11.46.1+dfsg-1","11.46.1+dfsg-2","11.46.1+dfsg-3","11.46.1+dfsg-4","13.31.0+dfsg-1","13.31.0+dfsg-2","8.83.26+dfsg-2"]},{"source":"osv","ecosystem":"Debian:13","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.48.25+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.48.25+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"php-laravel-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.14+dfsg-2+deb11u2"}]}],"versions":["6.20.14+dfsg-2","6.20.14+dfsg-2+deb11u1"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.40","v5.5.41","v5.5.42","v5.5.43","v5.5.44","v5.5.45","v5.5.46","v5.5.47","v5.5.48","v5.5.49","v5.5.5","v5.5.50","v5.5.6","v5.5.7","v5.5.8","v5.5.9","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.18","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.40","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.12","v5.7.13","v5.7.14","v5.7.15","v5.7.16","v5.7.17","v5.7.18","v5.7.19","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.24","v5.7.25","v5.7.26","v5.7.27","v5.7.28","v5.7.29","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.1","v5.8.10","v5.8.11","v5.8.12","v5.8.13","v5.8.14","v5.8.15","v5.8.16","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.21","v5.8.22","v5.8.23","v5.8.24","v5.8.25","v5.8.26","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.37","v5.8.38","v5.8.4","v5.8.5","v5.8.6","v5.8.7","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"illuminate/database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.26"}]}],"versions":["5.7.17","5.7.18","5.7.19","v1.0.0","v1.1.0","v1.1.1","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0-BETA1","v4.2.1","v4.2.12","v4.2.16","v4.2.17","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.22","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.33","v5.0.4","v5.1.1","v5.1.13","v5.1.16","v5.1.2","v5.1.20","v5.1.22","v5.1.25","v5.1.28","v5.1.30","v5.1.31","v5.1.41","v5.1.6","v5.1.8","v5.2.0","v5.2.19","v5.2.21","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.31","v5.2.32","v5.2.37","v5.2.43","v5.2.45","v5.2.6","v5.2.7","v5.3.0","v5.3.16","v5.3.23","v5.3.4","v5.4.0","v5.4.13","v5.4.17","v5.4.19","v5.4.27","v5.4.36","v5.4.9","v5.5.0","v5.5.16","v5.5.17","v5.5.2","v5.5.28","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.39","v5.5.40","v5.5.41","v5.5.43","v5.5.44","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.15","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.26","v5.7.27","v5.7.28","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.11","v5.8.12","v5.8.14","v5.8.15","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.22","v5.8.24","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.4","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.40"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.5","v5.5.6","v5.5.7","v5.5.8","v5.5.9"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.0"},{"fixed":"5.6.15"}]}],"versions":["v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.2","v5.6.3","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.20.45"}]}],"versions":["5.0.30","5.2.41","v4.0.0","v4.0.0-BETA2","v4.0.0-BETA3","v4.0.0-BETA4","v4.0.1","v4.0.10","v4.0.11","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.0.6","v4.0.7","v4.0.8","v4.0.9","v4.1.0","v4.1.1","v4.1.10","v4.1.11","v4.1.12","v4.1.13","v4.1.14","v4.1.15","v4.1.16","v4.1.17","v4.1.18","v4.1.19","v4.1.2","v4.1.20","v4.1.21","v4.1.22","v4.1.23","v4.1.24","v4.1.25","v4.1.26","v4.1.27","v4.1.28","v4.1.29","v4.1.3","v4.1.30","v4.1.31","v4.1.4","v4.1.5","v4.1.6","v4.1.7","v4.1.8","v4.1.9","v4.2.0","v4.2.0-BETA1","v4.2.1","v4.2.10","v4.2.11","v4.2.12","v4.2.13","v4.2.14","v4.2.15","v4.2.16","v4.2.17","v4.2.18","v4.2.19","v4.2.2","v4.2.20","v4.2.21","v4.2.22","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8","v4.2.9","v5.0.0","v5.0.1","v5.0.10","v5.0.11","v5.0.12","v5.0.13","v5.0.14","v5.0.15","v5.0.16","v5.0.17","v5.0.18","v5.0.19","v5.0.2","v5.0.20","v5.0.21","v5.0.22","v5.0.23","v5.0.24","v5.0.25","v5.0.26","v5.0.27","v5.0.28","v5.0.29","v5.0.3","v5.0.31","v5.0.32","v5.0.33","v5.0.34","v5.0.35","v5.0.4","v5.0.5","v5.0.6","v5.0.7","v5.0.8","v5.0.9","v5.1.0","v5.1.1","v5.1.10","v5.1.11","v5.1.12","v5.1.13","v5.1.14","v5.1.15","v5.1.16","v5.1.17","v5.1.18","v5.1.19","v5.1.2","v5.1.20","v5.1.21","v5.1.22","v5.1.23","v5.1.24","v5.1.25","v5.1.26","v5.1.27","v5.1.28","v5.1.29","v5.1.3","v5.1.30","v5.1.31","v5.1.32","v5.1.33","v5.1.34","v5.1.35","v5.1.36","v5.1.37","v5.1.38","v5.1.39","v5.1.4","v5.1.40","v5.1.41","v5.1.42","v5.1.43","v5.1.44","v5.1.45","v5.1.46","v5.1.5","v5.1.6","v5.1.7","v5.1.8","v5.1.9","v5.2.0","v5.2.0-beta1","v5.2.1","v5.2.10","v5.2.11","v5.2.12","v5.2.13","v5.2.14","v5.2.15","v5.2.16","v5.2.17","v5.2.18","v5.2.19","v5.2.2","v5.2.20","v5.2.21","v5.2.22","v5.2.23","v5.2.24","v5.2.25","v5.2.26","v5.2.27","v5.2.28","v5.2.29","v5.2.3","v5.2.30","v5.2.31","v5.2.32","v5.2.33","v5.2.34","v5.2.35","v5.2.36","v5.2.37","v5.2.38","v5.2.39","v5.2.4","v5.2.40","v5.2.42","v5.2.43","v5.2.44","v5.2.45","v5.2.5","v5.2.6","v5.2.7","v5.2.8","v5.2.9","v5.3.0","v5.3.0-RC1","v5.3.1","v5.3.10","v5.3.11","v5.3.12","v5.3.13","v5.3.14","v5.3.15","v5.3.16","v5.3.17","v5.3.18","v5.3.19","v5.3.2","v5.3.20","v5.3.21","v5.3.22","v5.3.23","v5.3.24","v5.3.25","v5.3.26","v5.3.27","v5.3.28","v5.3.29","v5.3.3","v5.3.30","v5.3.31","v5.3.4","v5.3.5","v5.3.6","v5.3.7","v5.3.8","v5.3.9","v5.4.0","v5.4.1","v5.4.10","v5.4.11","v5.4.12","v5.4.13","v5.4.14","v5.4.15","v5.4.16","v5.4.17","v5.4.18","v5.4.19","v5.4.2","v5.4.20","v5.4.21","v5.4.22","v5.4.23","v5.4.24","v5.4.25","v5.4.26","v5.4.27","v5.4.28","v5.4.29","v5.4.3","v5.4.30","v5.4.31","v5.4.32","v5.4.33","v5.4.34","v5.4.35","v5.4.36","v5.4.4","v5.4.5","v5.4.6","v5.4.7","v5.4.8","v5.4.9","v5.5.0","v5.5.1","v5.5.10","v5.5.11","v5.5.12","v5.5.13","v5.5.14","v5.5.15","v5.5.16","v5.5.17","v5.5.18","v5.5.19","v5.5.2","v5.5.20","v5.5.21","v5.5.22","v5.5.23","v5.5.24","v5.5.25","v5.5.26","v5.5.27","v5.5.28","v5.5.29","v5.5.3","v5.5.30","v5.5.31","v5.5.32","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.38","v5.5.39","v5.5.4","v5.5.40","v5.5.41","v5.5.42","v5.5.43","v5.5.44","v5.5.45","v5.5.46","v5.5.47","v5.5.48","v5.5.49","v5.5.5","v5.5.50","v5.5.6","v5.5.7","v5.5.8","v5.5.9","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.18","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.30","v5.6.31","v5.6.32","v5.6.33","v5.6.34","v5.6.35","v5.6.36","v5.6.37","v5.6.38","v5.6.39","v5.6.4","v5.6.40","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9","v5.7.0","v5.7.1","v5.7.10","v5.7.11","v5.7.12","v5.7.13","v5.7.14","v5.7.15","v5.7.16","v5.7.17","v5.7.18","v5.7.19","v5.7.2","v5.7.20","v5.7.21","v5.7.22","v5.7.23","v5.7.24","v5.7.25","v5.7.26","v5.7.27","v5.7.28","v5.7.29","v5.7.3","v5.7.4","v5.7.5","v5.7.6","v5.7.7","v5.7.8","v5.7.9","v5.8.0","v5.8.1","v5.8.10","v5.8.11","v5.8.12","v5.8.13","v5.8.14","v5.8.15","v5.8.16","v5.8.17","v5.8.18","v5.8.19","v5.8.2","v5.8.20","v5.8.21","v5.8.22","v5.8.23","v5.8.24","v5.8.25","v5.8.26","v5.8.27","v5.8.28","v5.8.29","v5.8.3","v5.8.30","v5.8.31","v5.8.32","v5.8.33","v5.8.34","v5.8.35","v5.8.36","v5.8.37","v5.8.38","v5.8.4","v5.8.5","v5.8.6","v5.8.7","v5.8.8","v5.8.9","v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.26","v6.20.27","v6.20.28","v6.20.29","v6.20.3","v6.20.30","v6.20.31","v6.20.32","v6.20.33","v6.20.34","v6.20.35","v6.20.36","v6.20.37","v6.20.38","v6.20.39","v6.20.4","v6.20.40","v6.20.41","v6.20.42","v6.20.43","v6.20.44","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.7"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.30.4","v7.30.5","v7.30.6","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.83.28"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.40.0","v8.41.0","v8.42.0","v8.42.1","v8.43.0","v8.44.0","v8.45.0","v8.45.1","v8.46.0","v8.47.0","v8.48.0","v8.48.1","v8.48.2","v8.49.0","v8.49.1","v8.49.2","v8.5.0","v8.50.0","v8.51.0","v8.52.0","v8.53.0","v8.53.1","v8.54.0","v8.55.0","v8.56.0","v8.57.0","v8.58.0","v8.59.0","v8.6.0","v8.60.0","v8.61.0","v8.62.0","v8.63.0","v8.64.0","v8.65.0","v8.66.0","v8.67.0","v8.68.0","v8.68.1","v8.69.0","v8.7.0","v8.7.1","v8.70.0","v8.70.1","v8.70.2","v8.71.0","v8.72.0","v8.73.0","v8.73.1","v8.73.2","v8.74.0","v8.75.0","v8.76.0","v8.76.1","v8.76.2","v8.77.0","v8.77.1","v8.78.0","v8.78.1","v8.79.0","v8.8.0","v8.80.0","v8.81.0","v8.82.0","v8.83.0","v8.83.1","v8.83.10","v8.83.11","v8.83.12","v8.83.13","v8.83.14","v8.83.15","v8.83.16","v8.83.17","v8.83.18","v8.83.19","v8.83.2","v8.83.20","v8.83.21","v8.83.22","v8.83.23","v8.83.24","v8.83.25","v8.83.26","v8.83.27","v8.83.3","v8.83.4","v8.83.5","v8.83.6","v8.83.7","v8.83.8","v8.83.9","v8.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0"},{"fixed":"9.52.17"}]}],"versions":["v9.0.0","v9.0.1","v9.0.2","v9.1.0","v9.10.0","v9.10.1","v9.11.0","v9.12.0","v9.12.1","v9.12.2","v9.13.0","v9.14.0","v9.14.1","v9.15.0","v9.16.0","v9.17.0","v9.18.0","v9.19.0","v9.2.0","v9.20.0","v9.21.0","v9.21.1","v9.21.2","v9.21.3","v9.21.4","v9.21.5","v9.21.6","v9.22.0","v9.22.1","v9.23.0","v9.24.0","v9.25.0","v9.25.1","v9.26.0","v9.26.1","v9.27.0","v9.28.0","v9.29.0","v9.3.0","v9.3.1","v9.30.0","v9.30.1","v9.31.0","v9.32.0","v9.33.0","v9.34.0","v9.35.0","v9.35.1","v9.36.0","v9.36.1","v9.36.2","v9.36.3","v9.36.4","v9.37.0","v9.38.0","v9.39.0","v9.4.0","v9.4.1","v9.40.0","v9.40.1","v9.41.0","v9.42.0","v9.42.1","v9.42.2","v9.43.0","v9.44.0","v9.45.0","v9.45.1","v9.46.0","v9.47.0","v9.48.0","v9.49.0","v9.5.0","v9.5.1","v9.50.0","v9.50.1","v9.50.2","v9.51.0","v9.52.0","v9.52.1","v9.52.10","v9.52.11","v9.52.12","v9.52.13","v9.52.14","v9.52.15","v9.52.16","v9.52.2","v9.52.3","v9.52.4","v9.52.5","v9.52.6","v9.52.7","v9.52.8","v9.52.9","v9.6.0","v9.7.0","v9.8.0","v9.8.1","v9.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.48.23"}]}],"versions":["v10.0.0","v10.0.1","v10.0.2","v10.0.3","v10.1.0","v10.1.1","v10.1.2","v10.1.3","v10.1.4","v10.1.5","v10.10.0","v10.10.1","v10.11.0","v10.12.0","v10.13.0","v10.13.1","v10.13.2","v10.13.3","v10.13.5","v10.14.0","v10.14.1","v10.15.0","v10.16.0","v10.16.1","v10.17.0","v10.17.1","v10.18.0","v10.19.0","v10.2.0","v10.20.0","v10.21.0","v10.21.1","v10.22.0","v10.23.0","v10.23.1","v10.24.0","v10.25.0","v10.25.1","v10.25.2","v10.26.0","v10.26.1","v10.26.2","v10.27.0","v10.28.0","v10.29.0","v10.3.0","v10.3.1","v10.3.2","v10.3.3","v10.30.0","v10.30.1","v10.31.0","v10.32.0","v10.32.1","v10.33.0","v10.34.0","v10.34.1","v10.34.2","v10.35.0","v10.36.0","v10.37.0","v10.37.1","v10.37.2","v10.37.3","v10.38.0","v10.38.1","v10.38.2","v10.39.0","v10.4.0","v10.4.1","v10.40.0","v10.41.0","v10.42.0","v10.43.0","v10.44.0","v10.45.0","v10.45.1","v10.46.0","v10.47.0","v10.48.0","v10.48.1","v10.48.10","v10.48.11","v10.48.12","v10.48.13","v10.48.14","v10.48.15","v10.48.16","v10.48.17","v10.48.18","v10.48.19","v10.48.2","v10.48.20","v10.48.21","v10.48.22","v10.48.3","v10.48.4","v10.48.5","v10.48.6","v10.48.7","v10.48.8","v10.48.9","v10.5.0","v10.5.1","v10.6.0","v10.6.1","v10.6.2","v10.7.0","v10.7.1","v10.8.0","v10.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0"},{"fixed":"11.31.0"}]}],"versions":["v11.0.0","v11.0.1","v11.0.2","v11.0.3","v11.0.4","v11.0.5","v11.0.6","v11.0.7","v11.0.8","v11.1.0","v11.1.1","v11.10.0","v11.11.0","v11.11.1","v11.12.0","v11.13.0","v11.14.0","v11.15.0","v11.16.0","v11.17.0","v11.18.0","v11.18.1","v11.19.0","v11.2.0","v11.20.0","v11.21.0","v11.22.0","v11.23.0","v11.23.1","v11.23.2","v11.23.3","v11.23.4","v11.23.5","v11.24.0","v11.24.1","v11.25.0","v11.26.0","v11.27.0","v11.27.1","v11.27.2","v11.28.0","v11.28.1","v11.29.0","v11.3.0","v11.3.1","v11.30.0","v11.4.0","v11.5.0","v11.6.0","v11.7.0","v11.8.0","v11.9.0","v11.9.1","v11.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.20.26"}]}],"versions":["v6.0.0","v6.0.1","v6.0.2","v6.0.3","v6.0.4","v6.1.0","v6.10.0","v6.10.1","v6.11.0","v6.12.0","v6.13.0","v6.13.1","v6.14.0","v6.15.0","v6.15.1","v6.16.0","v6.17.0","v6.17.1","v6.18.0","v6.18.1","v6.18.10","v6.18.11","v6.18.12","v6.18.13","v6.18.14","v6.18.15","v6.18.16","v6.18.17","v6.18.18","v6.18.19","v6.18.2","v6.18.20","v6.18.21","v6.18.22","v6.18.23","v6.18.24","v6.18.25","v6.18.26","v6.18.27","v6.18.28","v6.18.29","v6.18.3","v6.18.30","v6.18.31","v6.18.32","v6.18.33","v6.18.34","v6.18.35","v6.18.36","v6.18.37","v6.18.38","v6.18.39","v6.18.4","v6.18.40","v6.18.41","v6.18.42","v6.18.43","v6.18.5","v6.18.6","v6.18.7","v6.18.8","v6.18.9","v6.19.0","v6.19.1","v6.2.0","v6.20.0","v6.20.1","v6.20.10","v6.20.11","v6.20.12","v6.20.13","v6.20.14","v6.20.15","v6.20.16","v6.20.17","v6.20.18","v6.20.19","v6.20.2","v6.20.20","v6.20.21","v6.20.22","v6.20.23","v6.20.24","v6.20.25","v6.20.3","v6.20.4","v6.20.5","v6.20.6","v6.20.7","v6.20.8","v6.20.9","v6.3.0","v6.4.0","v6.4.1","v6.5.0","v6.5.1","v6.5.2","v6.6.0","v6.6.1","v6.6.2","v6.7.0","v6.8.0","v6.9.0"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.30.5"}]}],"versions":["v7.0.0","v7.0.1","v7.0.2","v7.0.3","v7.0.4","v7.0.5","v7.0.6","v7.0.7","v7.0.8","v7.1.0","v7.1.1","v7.1.2","v7.1.3","v7.10.0","v7.10.1","v7.10.2","v7.10.3","v7.11.0","v7.12.0","v7.13.0","v7.14.0","v7.14.1","v7.15.0","v7.16.0","v7.16.1","v7.17.0","v7.17.1","v7.17.2","v7.18.0","v7.19.0","v7.19.1","v7.2.0","v7.2.1","v7.2.2","v7.20.0","v7.21.0","v7.22.0","v7.22.1","v7.22.2","v7.22.3","v7.22.4","v7.23.0","v7.23.1","v7.23.2","v7.24.0","v7.25.0","v7.26.0","v7.26.1","v7.27.0","v7.28.0","v7.28.1","v7.28.2","v7.28.3","v7.28.4","v7.29.0","v7.29.1","v7.29.2","v7.29.3","v7.3.0","v7.30.0","v7.30.1","v7.30.2","v7.30.3","v7.30.4","v7.4.0","v7.5.0","v7.5.1","v7.5.2","v7.6.0","v7.6.1","v7.6.2","v7.7.0","v7.7.1","v7.8.0","v7.8.1","v7.9.0","v7.9.1","v7.9.2"]},{"source":"osv","ecosystem":"Packagist","package":"laravel/framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.40.0"}]}],"versions":["v8.0.0","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.12.0","v8.12.1","v8.12.2","v8.12.3","v8.13.0","v8.14.0","v8.15.0","v8.16.0","v8.16.1","v8.17.0","v8.17.1","v8.17.2","v8.18.0","v8.18.1","v8.19.0","v8.2.0","v8.20.0","v8.20.1","v8.21.0","v8.22.0","v8.22.1","v8.23.0","v8.23.1","v8.24.0","v8.25.0","v8.26.0","v8.26.1","v8.27.0","v8.28.0","v8.28.1","v8.29.0","v8.3.0","v8.30.0","v8.30.1","v8.31.0","v8.32.0","v8.32.1","v8.33.0","v8.33.1","v8.34.0","v8.35.0","v8.35.1","v8.36.0","v8.36.1","v8.36.2","v8.37.0","v8.38.0","v8.39.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.7.1","v8.8.0","v8.9.0"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"flarum","product":"framework"},{"vendor":"laravel","product":"framework"}],"references":[{"url":"https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h","tags":["x_refsource_CONFIRM","Vendor Advisory","web","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://github.com/laravel/framework/security/advisories/GHSA-4mg9-vhxq-vm7j","tags":["web"]},{"url":"https://packagist.org/packages/illuminate/database","tags":["web"]},{"url":"https://packagist.org/packages/laravel/framework","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4mg9-vhxq-vm7j"},{"url":"https://github.com/laravel/framework/commit/28e53f23a76206fb130e9a54eb95aa3f010e79c9","tags":["web"]},{"url":"https://github.com/laravel/framework/commit/886d261df0854426b4662b7ed5db6a1c575a4279","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml","tags":["web"]},{"url":"https://medium.com/@taylorotwell/laravel-security-release-5-6-15-and-5-5-40-56f1257933a0","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7852-w36x-6mf6"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52301","tags":["advisory"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2024-52301.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gv7v-rgg6-548h","tags":["advisory"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2021-04-28.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wq8p-mqvg-2p5h"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52301.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-52301","tags":["advisory"]},{"url":"https://github.com/laravel/framework","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-52301","title":"Laravel allows environment manipulation via query string","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T19:32:14.415Z","modified":"2024-12-21T17:02:39.839Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:34:03.333404Z"}],"euvd":[{"id":"EUVD-2024-3258","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T19:32:14Z","modified":"2024-12-21T17:02:39Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:04:33.692832Z"}],"ghsa":[{"id":"GHSA-gv7v-rgg6-548h","title":"Laravel environment manipulation via query string","description":"## Description\n\nWhen the `register_argc_argv php` directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.\n\n## Resolution\n\nThe framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T22:08:42Z","modified":"2024-12-21T18:30:49Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","level":"none"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:38:26.167657Z"},{"id":"GHSA-4mg9-vhxq-vm7j","title":"SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database","description":"### Impact\n\nThose using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\n\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\n\nYou may workaround this vulnerability by ensuring that only integers are passed to the `limit` and `offset` functions, as well as the `skip` and `take` functions.\n","status":"published","published":"2021-04-29T21:52:53Z","modified":"2023-01-09T05:04:39Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:36:10.502376Z"},{"id":"GHSA-7852-w36x-6mf6","title":"Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior","description":"The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of `false`. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the application's code, such as the example below:\n\n```\n\u003c?php\n\n$decyptedValue = decrypt($secret);\n\nif ($decryptedValue == '') {\n    // Code is run even though decrypted value is false...\n}\n```","status":"published","published":"2024-05-15T22:08:06Z","modified":"2024-05-15T22:08:07Z","cwes":["CWE-1240"],"updated_at":"2026-11-02T14:37:49.987036Z"},{"id":"GHSA-wq8p-mqvg-2p5h","title":"laravel framework SQL Injection via limit and offset functions","description":"### Impact\nThose using SQL Server with Laravel and allowing user input to be passed directly to the limit and offset functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\nYou may workaround this vulnerability by ensuring that only integers are passed to the limit and offset functions, as well as the skip and take functions.","status":"published","published":"2024-05-15T22:20:42Z","modified":"2024-05-15T22:20:43Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:37:49.987036Z"}],"nvd":[{"id":"CVE-2024-52301","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T20:15:14.087Z","modified":"2026-06-17T08:06:58.24Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:10:36.931115Z"}],"osv":[{"id":"CVE-2024-52301","title":"Laravel allows environment manipulation via query string","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T19:32:14.415Z","modified":"2026-10-28T02:30:33.36637926Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-52301","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T20:15:14.087Z","modified":"2026-11-02T12:03:08.133481979Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"GHSA-gv7v-rgg6-548h","title":"Laravel environment manipulation via query string","description":"## Description\n\nWhen the `register_argc_argv php` directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.\n\n## Resolution\n\nThe framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-12T22:08:42Z","modified":"2024-12-21T18:37:57.182411Z","cvss":[{"version":"3.1","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","level":"none"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:46:48.191583Z"},{"id":"BIT-laravel-2024-52301","description":"Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.","status":"published","published":"2024-11-14T07:12:00.72Z","modified":"2024-12-22T07:38:12.944Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"CLSA-2026-1772239984","title":"TuxCare security update for illuminate/database (1 CVE)","description":"TuxCare rebuilt illuminate/database to address 1 CVE. Fixed in 5.4.36-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:48:04.681748721Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773017339","title":"TuxCare security update for laravel/framework (10 CVEs)","description":"TuxCare rebuilt laravel/framework to address 10 CVEs. Fixed in 5.4.36-p2+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:48:04.641650282Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103741","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 5.5.50-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.485827895Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103742","title":"TuxCare security update for laravel/framework (9 CVEs)","description":"TuxCare rebuilt laravel/framework to address 9 CVEs. Fixed in 5.6.40-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.517840721Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773103743","title":"TuxCare security update for laravel/framework (9 CVEs)","description":"TuxCare rebuilt laravel/framework to address 9 CVEs. Fixed in 5.7.29-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.556426054Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773362940","title":"TuxCare security update for laravel/framework (1 CVE)","description":"TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.4.36-p3+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.574878603Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1776213253","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.1-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-10-15T09:47:59.4937507Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776213254","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.2-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-10-15T09:47:59.56692071Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776213257","title":"TuxCare security update for laravel/framework (8 CVEs)","description":"TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.3-p1+tuxcare.","status":"published","published":"2026-08-04T14:52:26Z","modified":"2026-10-15T09:47:59.553230097Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776214146","title":"TuxCare security update for laravel/framework (5 CVEs)","description":"TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 8.12.0-p3+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:59.473960544Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1780015757","title":"TuxCare security update for laravel/framework (2 CVEs)","description":"TuxCare rebuilt laravel/framework to address 2 CVEs. Fixed in 5.8.38-p4+tuxcare.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-10-15T09:47:53.472851237Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"DLA-3997-1","title":"php-laravel-framework - security update","status":"published","published":"2024-12-21T00:00:00Z","modified":"2026-03-09T01:20:35.547931Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"GHSA-4mg9-vhxq-vm7j","title":"SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database","description":"### Impact\n\nThose using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\n\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\n\nYou may workaround this vulnerability by ensuring that only integers are passed to the `limit` and `offset` functions, as well as the `skip` and `take` functions.\n","status":"published","published":"2021-04-29T21:52:53Z","modified":"2024-12-02T05:40:15.245335Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:37.148947Z"},{"id":"GHSA-7852-w36x-6mf6","title":"Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior","description":"The Laravel Encrypter component is susceptible to a vulnerability that may result in decryption failure, leading to an unexpected return of `false`. Exploiting this issue requires the attacker to manipulate the encrypted payload before decryption. When combined with weak type comparisons in the application's code, such as the example below:\n\n```\n\u003c?php\n\n$decyptedValue = decrypt($secret);\n\nif ($decryptedValue == '') {\n    // Code is run even though decrypted value is false...\n}\n```","status":"published","published":"2024-05-15T22:08:06Z","modified":"2024-11-29T05:40:57.344982Z","cwes":["CWE-1240"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"GHSA-wq8p-mqvg-2p5h","title":"laravel framework SQL Injection via limit and offset functions","description":"### Impact\nThose using SQL Server with Laravel and allowing user input to be passed directly to the limit and offset functions are vulnerable to SQL injection. Other database drivers such as MySQL and Postgres are not affected by this vulnerability.\n\n### Patches\nThis problem has been patched on Laravel versions 6.20.26, 7.30.5, and 8.40.0.\n\n### Workarounds\nYou may workaround this vulnerability by ensuring that only integers are passed to the limit and offset functions, as well as the skip and take functions.","status":"published","published":"2024-05-15T22:20:42Z","modified":"2024-11-29T05:41:40.570199Z","cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:59.131095Z"}]}}