Packagist / PACKAGE INTELLIGENCE

laravel/reverb

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

critical9.8

GHSA-m27r-m6rx-mhm4Fix available

Laravel Redis Horizontal Scaling Insecure Deserialization

Packagist / laravel/reverb

21 Jan

laravel/reverb Packagist

Ecosystem versions

Earlier releases before 1.7.0

Fixed in 1.7.0

34 explicitly affected versions

v1.0.0, v1.0.0-beta1, v1.0.0-beta10, v1.0.0-beta11, v1.0.0-beta12, v1.0.0-beta13, v1.0.0-beta14, v1.0.0-beta2, v1.0.0-beta3, v1.0.0-beta4, v1.0.0-beta5, v1.0.0-beta6, v1.0.0-beta7, v1.0.0-beta8, v1.0.0-beta9, v1.1.0, v1.2.0, v1.3.0, v1.3.1, v1.4.0, v1.4.1, v1.4.2, v1.4.3, v1.4.4, v1.4.5, v1.4.6, v1.4.7, v1.4.8, v1.5.0, v1.5.1, v1.6.0, v1.6.1, v1.6.2, v1.6.3

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "1.7.0"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "v1.0.0",
    "v1.0.0-beta1",
    "v1.0.0-beta10",
    "v1.0.0-beta11",
    "v1.0.0-beta12",
    "v1.0.0-beta13",
    "v1.0.0-beta14",
    "v1.0.0-beta2",
    "v1.0.0-beta3",
    "v1.0.0-beta4",
    "v1.0.0-beta5",
    "v1.0.0-beta6",
    "v1.0.0-beta7",
    "v1.0.0-beta8",
    "v1.0.0-beta9",
    "v1.1.0",
    "v1.2.0",
    "v1.3.0",
    "v1.3.1",
    "v1.4.0",
    "v1.4.1",
    "v1.4.2",
    "v1.4.3",
    "v1.4.4",
    "v1.4.5",
    "v1.4.6",
    "v1.4.7",
    "v1.4.8",
    "v1.5.0",
    "v1.5.1",
    "v1.6.0",
    "v1.6.1",
    "v1.6.2",
    "v1.6.3"
  ]
}

high8.7

GHSA-pfrr-xvrf-pxjxFix available

Laravel Reverb Missing API Signature Verification

Packagist / laravel/reverb

31 Oct

laravel/reverb Packagist

Ecosystem versions

Earlier releases before 1.4.0

Fixed in 1.4.0

19 explicitly affected versions

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "1.4.0"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "v1.0.0",
    "v1.0.0-beta1",
    "v1.0.0-beta10",
    "v1.0.0-beta11",
    "v1.0.0-beta12",
    "v1.0.0-beta13",
    "v1.0.0-beta14",
    "v1.0.0-beta2",
    "v1.0.0-beta3",
    "v1.0.0-beta4",
    "v1.0.0-beta5",
    "v1.0.0-beta6",
    "v1.0.0-beta7",
    "v1.0.0-beta8",
    "v1.0.0-beta9",
    "v1.1.0",
    "v1.2.0",
    "v1.3.0",
    "v1.3.1"
  ]
}