| Package | Affected versions | Patched versions |
|---|---|---|
| illuminate/database | ≥ 5.5.0, ≤ 5.5.44≥ 6.0.0, < 6.18.34≥ 7.0.0, < 7.23.2 | 6.18.347.23.2 |
| laravel | ≥ 7.0.0, < 7.23.2< 6.18.34 | 7.23.26.18.34 |
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free