Stephen Rees-Carter :laravel: on Nostr: I've joined the CVE hype-train! 🤣 Ok, in all seriousness, this is an issue if you ...

I've joined the CVE hype-train! 🤣

Ok, in all seriousness, this is an issue if you have register_argc_argv=On. It's trivial to exploit and can unlock dev/debug helpers. 😱

GO UPDATE!

https://securinglaravel.com/laravel-security-notice-laravel-environment-manipulation-via-query-string/