Security advisoryCVE-2020-24941
Improper Input Validation in Laravel
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
As published by the sources
Affected packages
- Affected
<6.18.35 || >=7.0.0,<7.24.0Fixed in6.18.357.24.0
Derived from the fixed versions above
What to do
Upgrade laravel/framework to the fixed version in your release line: 6.18.35, 7.24.0.
composer update laravel/framework --with-dependencies
To see which version you have installed, run composer show vendor/package. Running composer audit lists the known advisories that match your installed versions.
Quoted from the original advisory
Details
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.