~ / search / GHSA-w68r-5p45-5rqp

GHSA-w68r-5p45-5rqp

Improper Input Validation in Laravel

Source: GitHub Advisory Database (reviewed) High CVE-2020-24941

Packages

EcosystemPackageAffectedFixed in
Packagist laravel/framework < 6.18.35 6.18.35
Packagist laravel/framework >= 7.0.0, < 7.24.0 7.24.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.

References

External links from the advisory. They lead to third-party sites.