- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- Packagist
Advisories 2
- CVE-2017-14775Unrated
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token…
Affected: fixed in 5.5.10.
- CVE-2017-9303Unrated
Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote…
Affected: from 5.3.0, through 5.3.31; from 5.4.0, fixed in 5.4.22.