Laravel Cross-site Scripting vulnerability in blade templating

MEDIUM 4.7GHSA-297g-xg4h-7w4c · Published 15/05/2024 · updated 29/11/2024

In short

GHSA-297g-xg4h-7w4c is a MEDIUM (CVSS 4.7) vulnerability affecting illuminate/view.
Fix: update to 7.1.2 or later.

Package	Affected versions	Patched versions
illuminate/view Packagist	`≥ 7.0.0, < 7.1.2`	`7.1.2`

Laravel is prone to a Cross-site Scripting vulnerability in blade templating.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.