CVE-2020-13909 on Laravel 6 - does this need a fix? #424
Unanswered
rosswintle
asked this question in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Dependabot has told me I need to update to >= v2.0.5 on a Laravel 6 project because of CVE-2020-13909
But Ignition 2 is not compatible with Laravel 6.
Please can you confirm which of the following is true?
a) Ignition v1 is not affected by the security issue
b) Ignition v1 has been patched with a fix (it looks like the latest is v1.80.0 released 2nd August)
I note that Laravel v6 is an LTS version, so I would expect Ignition to be safe to use on it as well.
Thanks so much.
Beta Was this translation helpful? Give feedback.
All reactions