Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/54897?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54897?format=api", "vulnerability_id": "VCID-29ev-vnzj-bfe5", "summary": "Laravel Cookie serialization vulnerability\nLaravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to [laravel advisory](https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30) for more details and read the notes carefully when upgrading your application.", "aliases": [ { "alias": "GHSA-2867-6rrm-38gr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56351?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9rpm-c9n3-77d3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.30" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56348?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224046?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/224047?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/224048?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/224049?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/224050?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/224051?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/224052?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/224053?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/224054?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/224055?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.39", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.39" }, { "url": "http://public2.vulnerablecode.io/api/packages/224056?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/224057?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.41", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.41" }, { "url": "http://public2.vulnerablecode.io/api/packages/56350?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.43", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.43" }, { "url": "http://public2.vulnerablecode.io/api/packages/739815?format=api", "purl": "pkg:composer/illuminate/cookie@5.5.44", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.5.44" }, { "url": "http://public2.vulnerablecode.io/api/packages/56349?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224058?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/224059?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/224060?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/224061?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/224062?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/224063?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/224064?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/224065?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/224066?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/224067?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/224068?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/224069?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/224070?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/224071?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/224072?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/224073?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/224074?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/224075?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/224076?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/224077?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/224078?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/224079?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/224080?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/224081?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/224082?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/224083?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/224084?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/224085?format=api", "purl": "pkg:composer/illuminate/cookie@5.6.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-29ev-vnzj-bfe5" }, { "vulnerability": "VCID-9rpm-c9n3-77d3" }, { "vulnerability": "VCID-s2uq-yyre-ubh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/illuminate/cookie@5.6.29" } ], "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2018-08-08-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/cookie/2018-08-08-1.yaml" }, { "reference_url": "https://github.com/illuminate/cookie", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/illuminate/cookie" }, { "reference_url": "https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30" }, { "reference_url": "https://github.com/advisories/GHSA-2867-6rrm-38gr", "reference_id": "GHSA-2867-6rrm-38gr", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2867-6rrm-38gr" } ], "weaknesses": [ { "cwe_id": 502, "name": "Deserialization of Untrusted Data", "description": "The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-29ev-vnzj-bfe5" }