Earlier this week we released a security update to address a problem with query parameter binding in Laravel. However, the 6.x and 7.x releases were done before the Git sub-tree splits had completed running; therefore, anyone using the illuminate/database component apart from the Laravel framework or anyone using Lumen did not receive the updates on those versions.
Therefore, we have tagged new versions of illuminate/database on the 6.x and 7.x branches.
Anyone using the Laravel framework or using version 8.x of the Illuminate components is not affected by this release.