| Package | Affected versions | Patched versions |
|---|---|---|
| illuminate/auth | < 5.5.10 | 5.5.10 |
| laravel/framework | < 5.5.10 | 5.5.10 |
| laravel | ≤ 5.5.9 |
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free