{"id":"GHSA-2867-6rrm-38gr","aliases":[],"title":"Laravel Cookie serialization vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to [laravel advisory](https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30) for more details and read the notes carefully when upgrading your application.","severity":"high","score":null,"published":"2024-05-15T21:56:10.000Z","modified":"2024-11-29T05:42:35.295Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"illuminate/cookie","sources":[{"name":"OSV · GHSA-2867-6rrm-38gr","url":"https://osv.dev/vulnerability/GHSA-2867-6rrm-38gr"}],"ranges":[{"events":[{"introduced":"5.5.0"},{"fixed":"5.6.30"}],"type":"ECOSYSTEM"}],"versions":["v5.5.0","v5.5.16","v5.5.17","v5.5.2","v5.5.28","v5.5.33","v5.5.34","v5.5.35","v5.5.36","v5.5.37","v5.5.39","v5.5.40","v5.5.41","v5.5.43","v5.5.44","v5.6.0","v5.6.1","v5.6.10","v5.6.11","v5.6.12","v5.6.13","v5.6.14","v5.6.15","v5.6.16","v5.6.17","v5.6.19","v5.6.2","v5.6.20","v5.6.21","v5.6.22","v5.6.23","v5.6.24","v5.6.25","v5.6.26","v5.6.27","v5.6.28","v5.6.29","v5.6.3","v5.6.4","v5.6.5","v5.6.6","v5.6.7","v5.6.8","v5.6.9"],"fixed":["5.6.30"]}],"sourceAffected":[],"references":["https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2018-08-08-1.yaml","https://github.com/illuminate/cookie","https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30"],"sources":[{"name":"OSV","id":"GHSA-2867-6rrm-38gr","modified":"2024-11-29T05:42:35.295201Z","url":"https://osv.dev/vulnerability/GHSA-2867-6rrm-38gr"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T10:55:32.941Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}