low  CVE-2024-50345: Open redirect via browser-sanitized URLs

Versions affectées : >=2.0.0,<3.0.0|>=3.0.0,<4.0.0|>=4.0.0,<5.0.0|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.3.0|>=5.3.0,<5.4.0|>=5.4.0,<5.4.46|>=6.0.0,<6.1.0|>=6.1.0,<6.2.0|>=6.2.0,<6.3.0|>=6.3.0,<6.4.0|>=6.4.0,<6.4.14|>=7.0.0,<7.1.0|>=7.1.0,<7.1.7
Versions patchées : 5.4.46 6.4.14 7.1.7 5.4.46 6.4.14 7.1.7
https://symfony.com/cve-2024-50345

high  CVE-2024-51736: Command execution hijack on Windows with Process class

Versions affectées : >=2.0.0,<3.0.0|>=3.0.0,<4.0.0|>=4.0.0,<5.0.0|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.3.0|>=5.3.0,<5.4.0|>=5.4.0,<5.4.46|>=6.0.0,<6.1.0|>=6.1.0,<6.2.0|>=6.2.0,<6.3.0|>=6.3.0,<6.4.0|>=6.4.0,<6.4.14|>=7.0.0,<7.1.0|>=7.1.0,<7.1.7
Versions patchées : 5.4.46 6.4.14 7.1.7 5.4.46 6.4.14 7.1.7
https://symfony.com/cve-2024-51736

high  Laravel environment manipulation via query string

Versions affectées : >=11.0.0,<11.31.0|>=10.0.0,<10.48.23|>=9.0.0,<9.52.17|>=8.0.0,<8.83.28|>=7.0.0,<7.30.7|<6.20.45
Versions patchées : 6.20.45 7.30.7 8.83.28 9.52.17 10.48.23 11.31.0
https://github.com/advisories/GHSA-gv7v-rgg6-548h

medium  Laravel has a File Validation Bypass

Versions affectées : <11.44.1|>=12.0.0,<12.1.1
Versions patchées : 12.1.1 11.44.1
https://github.com/advisories/GHSA-78fx-h6xr-vch4

high  league/commonmark's quadratic complexity bugs may lead to a denial of service

Versions affectées : <2.6.0
Versions patchées : 2.6.0
https://github.com/advisories/GHSA-c2pc-g5qf-rfrf

medium  league/commonmark contains a XSS vulnerability in Attributes extension

Versions affectées : <2.7.0
Versions patchées : 2.7.0
https://github.com/advisories/GHSA-3527-qv2q-pfvx

medium  Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale

Versions affectées : <2.72.6|>=3.0.0,<3.8.4
Versions patchées : 3.8.4 2.72.6
https://github.com/advisories/GHSA-j3f9-p6hm-5w6q