OS Command Injection in Laravel Framework

HIGH 8.8CVE-2020-19316 · GHSA-w2pm-r78h-4m7v · Published 20/12/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
laravel/framework Packagist	`< 5.8.17`	`5.8.17`
framework laravel	`< 5.8.17`	`5.8.17`

Description

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

NVD description

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.