GHSA-7852-w36x-6mf6

Summary

Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior

Severity

medium

Published

2024-05-15

References

• https://github.com/laravel/framework/commit/28e53f23a76206fb130e9a54eb95aa3f010e79c9
• https://github.com/laravel/framework/commit/886d261df0854426b4662b7ed5db6a1c575a4279
• https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-03-30-1.yaml

Related advisories

• GHSA-qm5c-m76r-2hfr — critical · Packagist/laravel/framework
• GHSA-5vg9-5847-vvmq — high · Packagist/laravel/framework
• CVE-2024-52301 — high · Packagist/laravel/framework
• GHSA-wq8p-mqvg-2p5h — high · Packagist/laravel/framework
• GHSA-jwvj-pwww-3mj5 — high · Packagist/laravel/framework
• GHSA-6jvx-8ch9-j2jr — high · Packagist/laravel/framework
• CVE-2018-15133 — high · Packagist/laravel/framework
• GHSA-crmm-hgp2-wgrp — medium · Packagist/laravel/framework

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity