composer

laravel/laravel

Security advisories for laravel/laravel, newest first. 1 known, all fixed. If you’re on 5.4.22 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

13.11.0

Advisories

1 · 0 unfixed

Last advisory

17 May 2022

Safe from

5.4.22

1 advisory · newest first

MODERATE6.1 17 May 2022

Laravel does not properly constrain the host portion of a password-reset URL

GHSA-rc8x-jrrc-frfv · CVE-2017-9303

Affected

≥ 5.4.0, < 5.4.22

Fixed in

5.4.22

Published

17 May 2022

/advisories/composer/laravel/laravel/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

laravel/framework30 advisories

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →