GHSA-xpv2-hrfc-hw62high7.6

Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

The advisory, in context

Summary

The MyAccountController::postAccountInfoForm action bound to POST /admin/edit-account-info calls $this->guard()->user()->update($request->except(['_token'])). Because the controller uses except(['_token']) rather than $request->validated() or the restricted keys defined in AccountInfoRequest::validationData(), any column present in the user model's $fillable array is mass-assigned from the request, including password. Backpack ships a separate POST /admin/change-password route (postChangePasswordForm) that requires old_password verification via ChangePasswordRequest::withValidator. The edit-account-info endpoint silently bypasses that security control.

For the default Laravel 11 App\Models\User model — which Backpack's installer and documentation use as the canonical admin user model — $fillable is ['name','email','password']. The password cast is hashed, so a plaintext password=… form field is automatically hashed and persisted. Any attacker holding an authenticated Backpack session (session theft, stolen cookies, XSS, public-terminal residual session) can permanently take over the account by issuing one POST that includes password=<attacker_value>, with no knowledge of the victim's current password. This converts time-limited, session-bound access into persistent account takeover.

Vulnerable code

src/app/Http/Controllers/MyAccountController.php:38

public function postAccountInfoForm(AccountInfoRequest $request)
{
    $result = $this->guard()->user()->update($request->except(['_token']));
    ...
}

src/app/Http/Requests/AccountInfoRequest.php validationData() only narrows what gets validated (name, email column) — it does NOT narrow what is later saved.

Impact

Persistent account takeover after session theft. An adversary holding any authenticated Backpack session cookie (XSS, malware, stolen device, shared workstation) can rewrite the victim's password and retain access indefinitely, even after the original session expires or the victim logs out. Without this bypass the equivalent action requires old_password, which the adversary does not have.
Email pivot for full takeover. The same handler permits unverified change of the authentication column (email by default). A hijacked session can change the email to one the attacker controls and then use Backpack's password-reset flow as a backup channel.
Mass-assignment of any other $fillable attribute. In real deployments where the admin user model carries fields such as role_id, is_admin, team_id, email_verified_at, two_factor_secret, etc., the same request mass-assigns those fields. This expands the impact to privilege escalation and 2FA disablement on apps that follow standard Laravel patterns of adding such columns to $fillable.

Fix recommendation

Replace $request->except(['_token']) with an explicit allowlist that mirrors AccountInfoRequest::validationData():

public function postAccountInfoForm(AccountInfoRequest $request)
{
    $data = $request->only([backpack_authentication_column(), 'name']);
    $result = $this->guard()->user()->update($data);
    ...
}

This preserves change-password as the sole path for password mutation (which already enforces old_password).

Coordinates

Repository: https://github.com/Laravel-Backpack/CRUD
Vulnerable file & line: src/app/Http/Controllers/MyAccountController.php:38 (release 6.8.10; master e7201c5)
Route: POST /admin/edit-account-info (default admin prefix; setup_my_account_routes=true)
Verified against: backpack/crud 6.8.10, laravel/framework 11.x, PHP 8.4.7

— therawdev (responsible disclosure)

Reported by AI Agent sechub.dev and Vishal Shukla (@shukla304)

Affected packages

Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.

backpack/crud Packagist

Ecosystem versions

Earlier releases before 6.8.11

Fixed in 6.8.11

613 explicitly affected versions

0.4.1, 0.5.0, 0.5.1, 0.5.10, 0.5.9, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.7.8, 0.7.9, 0.8.0, 0.8.1, 0.8.10, 0.8.11, 0.8.12, 0.8.13, 0.8.14, 0.8.15, 0.8.16, 0.8.17, 0.8.18, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.9.0, 0.9.1, 0.9.10, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6, 0.9.7, 0.9.8, 0.9.9, 2.0.0, 2.0.1, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.18, 2.0.19, 2.0.2, 2.0.20, 2.0.21, 2.0.22, 2.0.23, 2.0.24, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 3.0.0, 3.0.1, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.18, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.1.0, 3.1.1, 3.1.10, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15, 3.1.16, 3.1.17, 3.1.18, 3.1.19, 3.1.2, 3.1.20, 3.1.21, 3.1.22, 3.1.23, 3.1.24, 3.1.25, 3.1.26, 3.1.28, 3.1.29, 3.1.3, 3.1.30, 3.1.31, 3.1.32, 3.1.33, 3.1.34, 3.1.35, 3.1.36, 3.1.37, 3.1.38, 3.1.39, 3.1.4, 3.1.40, 3.1.41, 3.1.42, 3.1.43, 3.1.44, 3.1.45, 3.1.46, 3.1.47, 3.1.48, 3.1.49, 3.1.5, 3.1.50, 3.1.51, 3.1.52, 3.1.53, 3.1.54, 3.1.55, 3.1.56, 3.1.57, 3.1.58, 3.1.59, 3.1.6, 3.1.60, 3.1.7, 3.1.8, 3.1.9, 3.2.0, 3.2.1, 3.2.10, 3.2.11, 3.2.12, 3.2.13, 3.2.14, 3.2.15, 3.2.16, 3.2.17, 3.2.18, 3.2.19, 3.2.2, 3.2.20, 3.2.21, 3.2.22, 3.2.23, 3.2.24, 3.2.25, 3.2.26, 3.2.27, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.9, 3.3.0, 3.3.1, 3.3.10, 3.3.11, 3.3.12, 3.3.13, 3.3.14, 3.3.15, 3.3.16, 3.3.17, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.3.7, 3.3.8, 3.3.9, 3.4.0, 3.4.1, 3.4.10, 3.4.11, 3.4.12, 3.4.13, 3.4.14, 3.4.15, 3.4.16, 3.4.17, 3.4.18, 3.4.19, 3.4.2, 3.4.20, 3.4.21, 3.4.22, 3.4.23, 3.4.24, 3.4.25, 3.4.26, 3.4.27, 3.4.28, 3.4.29, 3.4.3, 3.4.30, 3.4.31, 3.4.32, 3.4.33, 3.4.34, 3.4.35, 3.4.36, 3.4.37, 3.4.38, 3.4.39, 3.4.4, 3.4.40, 3.4.41, 3.4.42, 3.4.43, 3.4.5, 3.4.6, 3.4.7, 3.4.8, 3.4.9, 3.5.1, 3.5.10, 3.5.11, 3.5.12, 3.5.13, 3.5.14, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.5.6, 3.5.7, 3.5.8, 3.5.9, 3.6.1, 3.6.10, 3.6.11, 3.6.12, 3.6.13, 3.6.14, 3.6.15, 3.6.16, 3.6.17, 3.6.18, 3.6.19, 3.6.2, 3.6.20, 3.6.21, 3.6.22, 3.6.24, 3.6.25, 3.6.26, 3.6.27, 3.6.28, 3.6.29, 3.6.3, 3.6.30, 3.6.31, 3.6.32, 3.6.33, 3.6.4, 3.6.5, 3.6.6, 3.6.7, 3.6.8, 3.6.9, 4.0.0, 4.0.1, 4.0.10, 4.0.11, 4.0.12, 4.0.13, 4.0.14, 4.0.15, 4.0.16, 4.0.17, 4.0.18, 4.0.19, 4.0.2, 4.0.20, 4.0.21, 4.0.22, 4.0.23, 4.0.24, 4.0.25, 4.0.26, 4.0.27, 4.0.28, 4.0.29, 4.0.3, 4.0.30, 4.0.31, 4.0.32, 4.0.33, 4.0.34, 4.0.35, 4.0.36, 4.0.37, 4.0.38, 4.0.40, 4.0.41, 4.0.42, 4.0.43, 4.0.44, 4.0.45, 4.0.47, 4.0.48, 4.0.49, 4.0.5, 4.0.50, 4.0.51, 4.0.52, 4.0.53, 4.0.54, 4.0.55, 4.0.56, 4.0.57, 4.0.58, 4.0.59, 4.0.6, 4.0.60, 4.0.61, 4.0.62, 4.0.63, 4.0.7, 4.0.8, 4.0.9, 4.1.0, 4.1.1, 4.1.10, 4.1.11, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 4.1.16, 4.1.17, 4.1.18, 4.1.19, 4.1.2, 4.1.20, 4.1.21, 4.1.22, 4.1.23, 4.1.24, 4.1.25, 4.1.26, 4.1.27, 4.1.28, 4.1.29, 4.1.3, 4.1.30, 4.1.31, 4.1.32, 4.1.33, 4.1.34, 4.1.35, 4.1.36, 4.1.37, 4.1.38, 4.1.39, 4.1.4, 4.1.40, 4.1.41, 4.1.42, 4.1.43, 4.1.44, 4.1.45, 4.1.46, 4.1.47, 4.1.48, 4.1.49, 4.1.5, 4.1.50, 4.1.51, 4.1.52, 4.1.53, 4.1.54, 4.1.55, 4.1.56, 4.1.57, 4.1.58, 4.1.59, 4.1.6, 4.1.60, 4.1.61, 4.1.62, 4.1.63, 4.1.64, 4.1.65, 4.1.66, 4.1.67, 4.1.68, 4.1.69, 4.1.7, 4.1.70, 4.1.71, 4.1.72, 4.1.8, 4.1.9, 5.0.0, 5.0.1, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.15, 5.0.16, 5.0.17, 5.0.18, 5.0.19, 5.0.2, 5.0.20, 5.0.21, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.2.0, 5.2.1, 5.2.2, 5.3.0, 5.3.1, 5.3.10, 5.3.11, 5.3.12, 5.3.13, 5.3.2, 5.3.3, 5.3.4, 5.3.5, 5.3.6, 5.3.7, 5.3.8, 5.3.9, 5.4.0, 5.4.1, 5.4.10, 5.4.11, 5.4.12, 5.4.13, 5.4.14, 5.4.15, 5.4.16, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.8, 5.4.9, 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.6.0, 5.6.1, 5.6.2, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.1.0, 6.1.1, 6.1.10, 6.1.11, 6.1.12, 6.1.13, 6.1.14, 6.1.15, 6.1.16, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.3.0, 6.3.1, 6.3.2, 6.4.0, 6.4.1, 6.4.2, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.7.0, 6.7.1, 6.7.10, 6.7.11, 6.7.12, 6.7.13, 6.7.14, 6.7.15, 6.7.16, 6.7.17, 6.7.18, 6.7.19, 6.7.2, 6.7.20, 6.7.21, 6.7.22, 6.7.23, 6.7.24, 6.7.25, 6.7.26, 6.7.27, 6.7.28, 6.7.29, 6.7.3, 6.7.30, 6.7.31, 6.7.32, 6.7.33, 6.7.34, 6.7.35, 6.7.36, 6.7.37, 6.7.38, 6.7.39, 6.7.4, 6.7.40, 6.7.41, 6.7.42, 6.7.43, 6.7.44, 6.7.45, 6.7.46, 6.7.47, 6.7.48, 6.7.49, 6.7.5, 6.7.50, 6.7.51, 6.7.52, 6.7.53, 6.7.54, 6.7.55, 6.7.56, 6.7.6, 6.7.7, 6.7.8, 6.7.9, 6.8.0, 6.8.1, 6.8.10, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9, v4.0.46

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "6.8.11"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "0.4.1",
    "0.5.0",
    "0.5.1",
    "0.5.10",
    "0.5.9",
    "0.6.0",
    "0.6.1",
    "0.6.2",
    "0.6.3",
    "0.6.4",
    "0.6.5",
    "0.7",
    "0.7.1",
    "0.7.2",
    "0.7.3",
    "0.7.4",
    "0.7.5",
    "0.7.6",
    "0.7.7",
    "0.7.8",
    "0.7.9",
    "0.8.0",
    "0.8.1",
    "0.8.10",
    "0.8.11",
    "0.8.12",
    "0.8.13",
    "0.8.14",
    "0.8.15",
    "0.8.16",
    "0.8.17",
    "0.8.18",
    "0.8.2",
    "0.8.3",
    "0.8.4",
    "0.8.5",
    "0.8.6",
    "0.8.7",
    "0.8.8",
    "0.8.9",
    "0.9.0",
    "0.9.1",
    "0.9.10",
    "0.9.2",
    "0.9.3",
    "0.9.4",
    "0.9.5",
    "0.9.6",
    "0.9.7",
    "0.9.8",
    "0.9.9",
    "2.0.0",
    "2.0.1",
    "2.0.10",
    "2.0.11",
    "2.0.12",
    "2.0.13",
    "2.0.14",
    "2.0.15",
    "2.0.16",
    "2.0.17",
    "2.0.18",
    "2.0.19",
    "2.0.2",
    "2.0.20",
    "2.0.21",
    "2.0.22",
    "2.0.23",
    "2.0.24",
    "2.0.4",
    "2.0.5",
    "2.0.6",
    "2.0.7",
    "2.0.8",
    "2.0.9",
    "3.0.0",
    "3.0.1",
    "3.0.10",
    "3.0.11",
    "3.0.12",
    "3.0.13",
    "3.0.14",
    "3.0.15",
    "3.0.16",
    "3.0.18",
    "3.0.2",
    "3.0.3",
    "3.0.4",
    "3.0.5",
    "3.0.6",
    "3.0.7",
    "3.0.8",
    "3.0.9",
    "3.1.0",
    "3.1.1",
    "3.1.10",
    "3.1.11",
    "3.1.12",
    "3.1.13",
    "3.1.14",
    "3.1.15",
    "3.1.16",
    "3.1.17",
    "3.1.18",
    "3.1.19",
    "3.1.2",
    "3.1.20",
    "3.1.21",
    "3.1.22",
    "3.1.23",
    "3.1.24",
    "3.1.25",
    "3.1.26",
    "3.1.28",
    "3.1.29",
    "3.1.3",
    "3.1.30",
    "3.1.31",
    "3.1.32",
    "3.1.33",
    "3.1.34",
    "3.1.35",
    "3.1.36",
    "3.1.37",
    "3.1.38",
    "3.1.39",
    "3.1.4",
    "3.1.40",
    "3.1.41",
    "3.1.42",
    "3.1.43",
    "3.1.44",
    "3.1.45",
    "3.1.46",
    "3.1.47",
    "3.1.48",
    "3.1.49",
    "3.1.5",
    "3.1.50",
    "3.1.51",
    "3.1.52",
    "3.1.53",
    "3.1.54",
    "3.1.55",
    "3.1.56",
    "3.1.57",
    "3.1.58",
    "3.1.59",
    "3.1.6",
    "3.1.60",
    "3.1.7",
    "3.1.8",
    "3.1.9",
    "3.2.0",
    "3.2.1",
    "3.2.10",
    "3.2.11",
    "3.2.12",
    "3.2.13",
    "3.2.14",
    "3.2.15",
    "3.2.16",
    "3.2.17",
    "3.2.18",
    "3.2.19",
    "3.2.2",
    "3.2.20",
    "3.2.21",
    "3.2.22",
    "3.2.23",
    "3.2.24",
    "3.2.25",
    "3.2.26",
    "3.2.27",
    "3.2.3",
    "3.2.4",
    "3.2.5",
    "3.2.6",
    "3.2.7",
    "3.2.9",
    "3.3.0",
    "3.3.1",
    "3.3.10",
    "3.3.11",
    "3.3.12",
    "3.3.13",
    "3.3.14",
    "3.3.15",
    "3.3.16",
    "3.3.17",
    "3.3.2",
    "3.3.3",
    "3.3.4",
    "3.3.5",
    "3.3.6",
    "3.3.7",
    "3.3.8",
    "3.3.9",
    "3.4.0",
    "3.4.1",
    "3.4.10",
    "3.4.11",
    "3.4.12",
    "3.4.13",
    "3.4.14",
    "3.4.15",
    "3.4.16",
    "3.4.17",
    "3.4.18",
    "3.4.19",
    "3.4.2",
    "3.4.20",
    "3.4.21",
    "3.4.22",
    "3.4.23",
    "3.4.24",
    "3.4.25",
    "3.4.26",
    "3.4.27",
    "3.4.28",
    "3.4.29",
    "3.4.3",
    "3.4.30",
    "3.4.31",
    "3.4.32",
    "3.4.33",
    "3.4.34",
    "3.4.35",
    "3.4.36",
    "3.4.37",
    "3.4.38",
    "3.4.39",
    "3.4.4",
    "3.4.40",
    "3.4.41",
    "3.4.42",
    "3.4.43",
    "3.4.5",
    "3.4.6",
    "3.4.7",
    "3.4.8",
    "3.4.9",
    "3.5.1",
    "3.5.10",
    "3.5.11",
    "3.5.12",
    "3.5.13",
    "3.5.14",
    "3.5.2",
    "3.5.3",
    "3.5.4",
    "3.5.5",
    "3.5.6",
    "3.5.7",
    "3.5.8",
    "3.5.9",
    "3.6.1",
    "3.6.10",
    "3.6.11",
    "3.6.12",
    "3.6.13",
    "3.6.14",
    "3.6.15",
    "3.6.16",
    "3.6.17",
    "3.6.18",
    "3.6.19",
    "3.6.2",
    "3.6.20",
    "3.6.21",
    "3.6.22",
    "3.6.24",
    "3.6.25",
    "3.6.26",
    "3.6.27",
    "3.6.28",
    "3.6.29",
    "3.6.3",
    "3.6.30",
    "3.6.31",
    "3.6.32",
    "3.6.33",
    "3.6.4",
    "3.6.5",
    "3.6.6",
    "3.6.7",
    "3.6.8",
    "3.6.9",
    "4.0.0",
    "4.0.1",
    "4.0.10",
    "4.0.11",
    "4.0.12",
    "4.0.13",
    "4.0.14",
    "4.0.15",
    "4.0.16",
    "4.0.17",
    "4.0.18",
    "4.0.19",
    "4.0.2",
    "4.0.20",
    "4.0.21",
    "4.0.22",
    "4.0.23",
    "4.0.24",
    "4.0.25",
    "4.0.26",
    "4.0.27",
    "4.0.28",
    "4.0.29",
    "4.0.3",
    "4.0.30",
    "4.0.31",
    "4.0.32",
    "4.0.33",
    "4.0.34",
    "4.0.35",
    "4.0.36",
    "4.0.37",
    "4.0.38",
    "4.0.40",
    "4.0.41",
    "4.0.42",
    "4.0.43",
    "4.0.44",
    "4.0.45",
    "4.0.47",
    "4.0.48",
    "4.0.49",
    "4.0.5",
    "4.0.50",
    "4.0.51",
    "4.0.52",
    "4.0.53",
    "4.0.54",
    "4.0.55",
    "4.0.56",
    "4.0.57",
    "4.0.58",
    "4.0.59",
    "4.0.6",
    "4.0.60",
    "4.0.61",
    "4.0.62",
    "4.0.63",
    "4.0.7",
    "4.0.8",
    "4.0.9",
    "4.1.0",
    "4.1.1",
    "4.1.10",
    "4.1.11",
    "4.1.12",
    "4.1.13",
    "4.1.14",
    "4.1.15",
    "4.1.16",
    "4.1.17",
    "4.1.18",
    "4.1.19",
    "4.1.2",
    "4.1.20",
    "4.1.21",
    "4.1.22",
    "4.1.23",
    "4.1.24",
    "4.1.25",
    "4.1.26",
    "4.1.27",
    "4.1.28",
    "4.1.29",
    "4.1.3",
    "4.1.30",
    "4.1.31",
    "4.1.32",
    "4.1.33",
    "4.1.34",
    "4.1.35",
    "4.1.36",
    "4.1.37",
    "4.1.38",
    "4.1.39",
    "4.1.4",
    "4.1.40",
    "4.1.41",
    "4.1.42",
    "4.1.43",
    "4.1.44",
    "4.1.45",
    "4.1.46",
    "4.1.47",
    "4.1.48",
    "4.1.49",
    "4.1.5",
    "4.1.50",
    "4.1.51",
    "4.1.52",
    "4.1.53",
    "4.1.54",
    "4.1.55",
    "4.1.56",
    "4.1.57",
    "4.1.58",
    "4.1.59",
    "4.1.6",
    "4.1.60",
    "4.1.61",
    "4.1.62",
    "4.1.63",
    "4.1.64",
    "4.1.65",
    "4.1.66",
    "4.1.67",
    "4.1.68",
    "4.1.69",
    "4.1.7",
    "4.1.70",
    "4.1.71",
    "4.1.72",
    "4.1.8",
    "4.1.9",
    "5.0.0",
    "5.0.1",
    "5.0.10",
    "5.0.11",
    "5.0.12",
    "5.0.13",
    "5.0.14",
    "5.0.15",
    "5.0.16",
    "5.0.17",
    "5.0.18",
    "5.0.19",
    "5.0.2",
    "5.0.20",
    "5.0.21",
    "5.0.3",
    "5.0.4",
    "5.0.5",
    "5.0.6",
    "5.0.7",
    "5.0.8",
    "5.0.9",
    "5.1.0",
    "5.1.1",
    "5.1.2",
    "5.1.3",
    "5.1.4",
    "5.2.0",
    "5.2.1",
    "5.2.2",
    "5.3.0",
    "5.3.1",
    "5.3.10",
    "5.3.11",
    "5.3.12",
    "5.3.13",
    "5.3.2",
    "5.3.3",
    "5.3.4",
    "5.3.5",
    "5.3.6",
    "5.3.7",
    "5.3.8",
    "5.3.9",
    "5.4.0",
    "5.4.1",
    "5.4.10",
    "5.4.11",
    "5.4.12",
    "5.4.13",
    "5.4.14",
    "5.4.15",
    "5.4.16",
    "5.4.2",
    "5.4.3",
    "5.4.4",
    "5.4.5",
    "5.4.6",
    "5.4.7",
    "5.4.8",
    "5.4.9",
    "5.5.0",
    "5.5.1",
    "5.5.2",
    "5.5.3",
    "5.5.4",
    "5.5.5",
    "5.5.6",
    "5.5.7",
    "5.5.8",
    "5.6.0",
    "5.6.1",
    "5.6.2",
    "6.0.0",
    "6.0.1",
    "6.0.2",
    "6.0.3",
    "6.0.4",
    "6.0.5",
    "6.0.6",
    "6.0.7",
    "6.1.0",
    "6.1.1",
    "6.1.10",
    "6.1.11",
    "6.1.12",
    "6.1.13",
    "6.1.14",
    "6.1.15",
    "6.1.16",
    "6.1.2",
    "6.1.3",
    "6.1.4",
    "6.1.5",
    "6.1.6",
    "6.1.7",
    "6.1.8",
    "6.1.9",
    "6.2.0",
    "6.2.1",
    "6.2.2",
    "6.2.3",
    "6.2.4",
    "6.3.0",
    "6.3.1",
    "6.3.2",
    "6.4.0",
    "6.4.1",
    "6.4.2",
    "6.5.0",
    "6.5.1",
    "6.5.2",
    "6.5.3",
    "6.5.4",
    "6.5.5",
    "6.6.0",
    "6.6.1",
    "6.6.2",
    "6.6.3",
    "6.6.4",
    "6.6.5",
    "6.6.6",
    "6.7.0",
    "6.7.1",
    "6.7.10",
    "6.7.11",
    "6.7.12",
    "6.7.13",
    "6.7.14",
    "6.7.15",
    "6.7.16",
    "6.7.17",
    "6.7.18",
    "6.7.19",
    "6.7.2",
    "6.7.20",
    "6.7.21",
    "6.7.22",
    "6.7.23",
    "6.7.24",
    "6.7.25",
    "6.7.26",
    "6.7.27",
    "6.7.28",
    "6.7.29",
    "6.7.3",
    "6.7.30",
    "6.7.31",
    "6.7.32",
    "6.7.33",
    "6.7.34",
    "6.7.35",
    "6.7.36",
    "6.7.37",
    "6.7.38",
    "6.7.39",
    "6.7.4",
    "6.7.40",
    "6.7.41",
    "6.7.42",
    "6.7.43",
    "6.7.44",
    "6.7.45",
    "6.7.46",
    "6.7.47",
    "6.7.48",
    "6.7.49",
    "6.7.5",
    "6.7.50",
    "6.7.51",
    "6.7.52",
    "6.7.53",
    "6.7.54",
    "6.7.55",
    "6.7.56",
    "6.7.6",
    "6.7.7",
    "6.7.8",
    "6.7.9",
    "6.8.0",
    "6.8.1",
    "6.8.10",
    "6.8.2",
    "6.8.3",
    "6.8.4",
    "6.8.5",
    "6.8.6",
    "6.8.7",
    "6.8.8",
    "6.8.9",
    "v4.0.46"
  ]
}

backpack/crud Packagist

Ecosystem versions

From 7.0.0-alpha.1 before 7.0.34

Fixed in 7.0.34

61 explicitly affected versions

7.0.0, 7.0.0-alpha.1, 7.0.0-alpha.2, 7.0.0-alpha.3, 7.0.0-alpha.4, 7.0.0-alpha.5, 7.0.0-alpha.6, 7.0.0-alpha.7, 7.0.0-alpha.8, 7.0.0-alpha.9, 7.0.0-beta.1, 7.0.0-beta.10, 7.0.0-beta.11, 7.0.0-beta.12, 7.0.0-beta.13, 7.0.0-beta.14, 7.0.0-beta.15, 7.0.0-beta.16, 7.0.0-beta.17, 7.0.0-beta.18, 7.0.0-beta.2, 7.0.0-beta.3, 7.0.0-beta.4, 7.0.0-beta.5, 7.0.0-beta.6, 7.0.0-beta.7, 7.0.0-beta.8, 7.0.0-beta.9, 7.0.1, 7.0.10, 7.0.11, 7.0.12, 7.0.13, 7.0.14, 7.0.15, 7.0.16, 7.0.17, 7.0.18, 7.0.19, 7.0.2, 7.0.20, 7.0.21, 7.0.22, 7.0.23, 7.0.24, 7.0.25, 7.0.26, 7.0.27, 7.0.28, 7.0.29, 7.0.3, 7.0.30, 7.0.31, 7.0.32, 7.0.33, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9