# Laravel Cookie Security Releases

DevFeed: [Laravel Cookie Security Releases](<https://devfeed.tech/articles/laravel-cookie-security-releases-3763.md>)

Original publisher: [Read original article](<https://laravel.com/blog/laravel-cookie-security-releases>)

Author: Taylor Otwell

Published: 2020-07-27T19:09:00Z

Content type: release

Language: en

Sources: [Laravel Blog](<https://devfeed.tech/sources/laravel-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [encryption](<https://devfeed.tech/tags/encryption.md>), [framework](<https://devfeed.tech/tags/framework.md>), [laravel](<https://devfeed.tech/tags/laravel.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Laravel released fixes for a vulnerability affecting applications using the cookie session driver alongside an exposed encryption oracle. The fix adds and verifies an HMAC-derived cookie-name prefix, invalidating existing encrypted cookies.

## Source excerpt

Today we released several fixes to address a security vulnerability in the framework that we were notified of during the weekend. Application's using the "cookie" session driver were the primary appl...