diff --git a/FreeScout-Dependencies-Security.md b/FreeScout-Dependencies-Security.md index 1591ff5..d715f6c 100644 --- a/FreeScout-Dependencies-Security.md +++ b/FreeScout-Dependencies-Security.md @@ -2,4 +2,12 @@ You can read how FreeScout Team ensures dependencies security [here](https://github.com/freescout-helpdesk/freescout/wiki/Development-Guide#maintaining-security-and-laravel-no-upgrade-policy). -Below is the list of known security issues in dependencies along with the information on patches fixing them in FreeScout. \ No newline at end of file +Below is the list of known security issues in dependencies along with the information on patches fixing them in FreeScout. + +*** + +``` +RCE vulnerability in "cookie" session driver +https://blog.laravel.com/laravel-cookie-security-releases +``` +Fix: [822fb85](https://github.com/freescout-helpdesk/freescout/commit/822fb85f1c534131a02274971a19dd50a2109c8b) \ No newline at end of file