Security Release: Laravel 6.18.34, 7.23.2

T1Covered by 1 source · first reported by Framework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter at 06 Aug 2020, 15:07 UTC

Today we released a security patch for Laravel 6.x and 7.x. In previous releases of Laravel, it was possible to mass assign Eloquent attributes that included the model's table name: ``` $model->fill...

devreleases

Sources

• T1Security Release: Laravel 6.18.34, 7.23.2Framework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter06 Aug 2020, 15:07