Description
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | illuminate/database | >= 5.5.0, <= 5.5.44 | — | GHSA-c7rm-w2hj-x8g3 |
| Packagist | illuminate/database | >= 6.0.0, < 6.18.34 | 6.18.34 | GHSA-c7rm-w2hj-x8g3 |
| Packagist | illuminate/database | >= 7.0.0, < 7.23.2 | 7.23.2 | GHSA-c7rm-w2hj-x8g3 |