Threat database

A vulnerability in Laravel Framework versions 8 through 11 may allow a remote attacker to discover database credentials stored in the storage/logs/laravel.log file. This issue arises if debugging logs are enabled and access controls are not properly configured. The vulnerability is disputed because proper access control can mitigate the risk. A fix is available in Laravel version 12.