Laravel Framework PHP Object Injection

Laravel Framework versions since 4.1 suffer from a PHP objection injection vulnerability when encryption is turned off.