laravel/framework · Security
Laravel Cookie serialization vulnerability
- GHSA ID
- GHSA-6jvx-8ch9-j2jr
- Severity
- high
- Published
- Updated
Description
Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to laravel advisory for more details and read the notes carefully when upgrading your application.
CWEs
- CWE-502 · Deserialization of Untrusted Data