An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3530
https://blog.laravel.com/security-release-laravel-61834-7232