# Security Release: Laravel 6.18.35, 7.24.0

DevFeed: [Security Release: Laravel 6.18.35, 7.24.0](<https://devfeed.tech/articles/security-release-laravel-6-18-35-7-24-0-3905.md>)

Original publisher: [Read original article](<https://laravel.com/blog/security-release-laravel-61835-7240>)

Author: Taylor Otwell

Published: 2020-08-07T15:16:00Z

Content type: release

Language: en

Sources: [Laravel Blog](<https://devfeed.tech/sources/laravel-blog.md>)

Topics: [Laravel](<https://devfeed.tech/topics/laravel.md>), [Security](<https://devfeed.tech/topics/security.md>), [Eloquent ORM](<https://devfeed.tech/topics/eloquent.md>), [Database](<https://devfeed.tech/topics/database.md>)

Tags: [bug](<https://devfeed.tech/tags/bug.md>), [database](<https://devfeed.tech/tags/database.md>), [framework](<https://devfeed.tech/tags/framework.md>), [laravel](<https://devfeed.tech/tags/laravel.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Laravel 6.18.35 and 7.24.0 include a security patch for unexpected mass-assignment updates involving nested JSON column expressions when models use the $guarded property. The fix validates updated columns against the database table schema and may add one database query.

## Source excerpt

**Note: This security patch only affects applications using the `$guarded` property on models. In addition, applications that set `$guarded` to `[]` or `['*']` are not affected by the bug described in...