| Package | Affected versions | Patched versions |
|---|---|---|
| laravel/framework | ≥ 11.9.0, < 11.36.0 | 11.36.0 |
| framework | ≥ 11.9.0, < 11.36.0 | 11.36.0 |
The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free