Skip to content
OpenAdvisories
High DLA-3997-1 1 CVE

php-laravel-framework - security update

Published Dec 21, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 php-laravel-framework 6.20.14+dfsg-2+deb11u2

Vulnerabilities 1

  • High 8.7
    CVE-2024-52301 Public exploit EPSS 45%

    Laravel allows environment manipulation via query string

    Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerabi…

    laravel framework laravel/framework php-laravel-framework Debian Packagist