Laravel v5.4.32 is Released with a Security Fix for Image Uploads

Laravel 5.4.32 is now released and it includes a security fix for apps that accept local image uploads and a revert on a recent change to the “BelongsToMany::create()” method.

If your app allows local image uploads you should upgrade to this version now. Below is a complete list of changes.

v5.4.32 Changelog:

Added

Added FilesystemAdapter::path() method (#20395)

Changed

Allow Collection::random() to return 0 items (#20396, #20402)

to return items (#20396, #20402) Accept options on FilesystemAdapter::temporaryUrl() (#20394)

(#20394) Sync withoutOverlapping method on Event and CallbackEvent (#20389)

method on and (#20389) Prevent PHP file uploads by default unless explicitly allowed (#20392, #20400)

Allow other filesystem adapter to implement temporaryUrl() (#20398)

Fixed

Reverted breaking change on BelongsToMany::create() (#20407)