jeremy/suivicpt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Upgrade Laravel 11 to 12 to patch CRLF injection CVE-2026-48019

Browse Source 
The default email validation rule was vulnerable to CRLF injection
(GHSA-5vg9-5847-vvmq) in all 11.x releases with no backport available.
Upgraded to v12.64.0, the first patched line for this branch.

All 50 Pest tests pass unchanged, Pint clean, composer audit reports
no advisories. No application code changes needed.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
jeremy bayse
2026-07-25 22:55:49 +02:00
co-authored by Claude Sonnet 5
parent d8dc57a5df
commit 674c43afea
2 changed files with 131 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
composer.json
+1 -1
View File
@@ -7,7 +7,7 @@
"license": "MIT",
"require": {
"php": "^8.2",
"laravel/framework": "^11.31",
"laravel/framework": "^12.60",
"laravel/tinker": "^2.9",
"livewire/livewire": "^3.6.4",
"livewire/volt": "^1.7.0"