Vulnerability advisory

CVE-2020-19316

Published Dec 20, 2021Updated Oct 20, 2026OSV record ↗

Severity

Affected versions

Affected commits	Fixed by commit
GIT github.com/laravel/framework ↗
All commits before 33c04dd2a431adeeb49926a4f2b20590cc033ca2	`33c04dd2a431adeeb49926a4f2b20590cc033ca2`
Not specified	`44c3feb604944599ad1c782a9942981c3991fa31`
Also listed as affected (19) `v5.8.16` `v5.8.15` `v5.8.14` `v5.8.13` `v5.8.12` `v5.8.11` `v5.8.10` `v5.8.9` `v5.8.8` `v5.8.7` `v5.8.6` `v5.8.5` `v5.5.1` `v5.5.0` `v4.1.0` `v4.0.0` `v4.0.0-BETA4` `v4.0.0-BETA3` `v4.0.0-BETA2`

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.