CVE-2025-45731: Php Laravel Unsafe Pre Deletion Mutation

Performing non-transactional database mutations (such as update or delete) inside a pre-deletion event listener (e.g., `*Deleting`) can lead to race conditions and persistent data inconsistencies. If the parent deletion aborts or fails, the side effects applied by this listener cannot be rolled back, causing orphaned records. Move this cleanup logic to a pos

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0PHPβ
greprules fetch cve-2025-45731-php-laravel-unsafe-pre-deletion-mutation --engine opengrep

Description

Performing non-transactional database mutations (such as update or delete) inside a pre-deletion event listener (e.g., `*Deleting`) can lead to race conditions and persistent data inconsistencies. If the parent deletion aborts or fails, the side effects applied by this listener cannot be rolled back, causing orphaned records. Move this cleanup logic to a pos