Passport security advisories
Latest release 13.10.0 laravel/passport
No open advisories.
Check your version
Type the Passport version you run to see which advisories affect it.
All Passport advisories
1 advisory, newest first.
-
high Laravel · · Reviewed
Laravel Passport: Client Credentials Tokens Can Authenticate as a Real User
Can let a machine-to-machine token act as the user whose ID matches the client's ID, such as when Passport::$clientUuids is false.
Fixed in 13.7.1