Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,535 Dependabot PRs
Latest PR:
about 6 hours ago
Unique Repositories:
653 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated about 12 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 4 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 4 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated about 21 hours ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
Bump laravel/framework from 12.23.1 to 12.31.1

Samuel2025-IA/Cursos_Laravel #21

12.23.1 → 12.31.1 Minor PR
Open about 2 months ago 1 comment
Samuel2025-IA
chore(deps): bump laravel/framework from 12.28.1 to 12.31.1

get-async/marketing #36

12.28.1 → 12.31.1 Minor PR
Closed about 2 months ago 1 comment
get-async
composer: bump laravel/framework from 12.20.0 to 12.31.1

josephgodwinkimani/lara-nuxt-boilerplate #20

12.20.0 → 12.31.1 Minor PR
Closed about 2 months ago 2 comments
josephgodwinkimani
Bump laravel/framework from 11.45.1 to 12.31.1

Yahir-Etzael/vulpesocean #3

11.45.1 → 12.31.1 Major PR
Closed about 2 months ago 1 comment
Yahir-Etzael
chore(deps-php):(deps-dev): update laravel/framework requirement from ^11.35 to ^12.31

peschull/menschlichkeit-oesterreich-development #29

^11.35 → ^12.31
Closed 2 months ago 1 comment
peschull
build(deps): bump the dependencies group in /backend with 3 updates

jnicrimi/laravel-playground #192

12.30.1 → 12.31.1 Minor PR
Merged 2 months ago 1 comment
jnicrimi
build: Bump laravel/framework from 12.28.1 to 12.31.1

VATSIM-UK/core #4338

12.28.1 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
VATSIM-UK
build: Bump laravel/framework from 12.18.0 to 12.31.1

hazzas-99/core #723

12.18.0 → 12.31.1 Minor PR
Open 2 months ago
hazzas-99
Bump the laravel group across 1 directory with 3 updates

foxcoverts/climbing-team #473

12.28.1 → 12.31.1 Minor PR
Open 2 months ago
foxcoverts
chore(deps): bump the php-dependencies group with 4 updates

laravelcm/laravel.cm #421

12.30.1 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
laravelcm
Bump laravel/framework from 12.31.0 to 12.31.1 in the actions-deps group

adaoss/HACCP_php #1

12.31.0 → 12.31.1 Patch PR
Open 2 months ago
adaoss
Bump laravel/framework from 11.46.0 to 12.31.1 in the production-dependencies group

JorgeRPL/SafeHubVecinal #1

11.46.0 → 12.31.1 Major PR
Open 2 months ago
JorgeRPL
chore(deps): bump laravel/framework from 12.30.1 to 12.31.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #582

12.30.1 → 12.31.1 Minor PR
Open 2 months ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.21.0 to 12.31.1

x0ne-training/ESGI-3SI2-TEAM1 #11

12.21.0 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
x0ne-training
chore(deps): bump laravel/framework from 11.31.0 to 11.44.1

teamriverbubbles/pyrodactyl #2

11.31.0 → 11.44.1 Minor PR
Open 2 months ago
teamriverbubbles
Bump laravel/framework from 12.29.0 to 12.31.1

EncoreDigitalGroup/laravel-cache-prune #63

12.29.0 → 12.31.1 Minor PR
Open 2 months ago
EncoreDigitalGroup
Bump laravel/framework from 12.15.0 to 12.31.1

ahmednour1234/New-Task-Company- #74

12.15.0 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
ahmednour1234
fix: Bump laravel/framework from 12.31.0 to 12.31.1

cedricziel/faro-shop #1743

12.31.0 → 12.31.1 Patch PR
Merged 2 months ago 1 comment
cedricziel
Bump laravel/framework from 11.44.2 to 12.31.1

simonebogni/portfolio #195

11.44.2 → 12.31.1 Major PR
Open 2 months ago 1 comment
simonebogni
Bump laravel/framework from 12.26.4 to 12.31.1

liberu-social-network/social-network-laravel #347

12.26.4 → 12.31.1 Minor PR
Open 2 months ago 1 comment
liberu-social-network
chore(deps): bump laravel/framework from 12.28.1 to 12.31.1

steven-streller/master-laravel #117

12.28.1 → 12.31.1 Minor PR
Open 2 months ago
steven-streller
chore(deps): bump laravel/framework from 12.29.0 to 12.31.1

kolaente/futter.rocks #108

12.29.0 → 12.31.1 Minor PR
Open 2 months ago
kolaente
chore(deps): bump laravel/framework from 12.30.1 to 12.31.1

iBotPeaches/LeafApp_Infinite #1844

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
iBotPeaches
Bump laravel/framework from 11.13.0 to 11.44.1

krvdias/sales_management_system #16

11.13.0 → 11.44.1 Minor PR
Open 2 months ago
krvdias
Bump laravel/framework from 12.29.0 to 12.31.1

Tschucki/pr0verter #311

12.29.0 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
Tschucki
Bump laravel/framework from 12.30.1 to 12.31.1

floor9design-ltd/laravel-uuid-model-support #123

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
floor9design-ltd
Bump laravel/framework from 12.28.1 to 12.31.1

liberu-accounting/accounting-laravel #656

12.28.1 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
liberu-accounting
Bump laravel/framework from 12.12.0 to 12.31.1 in the production-dependencies group

adityapryg/sqa-taspen #1

12.12.0 → 12.31.1 Minor PR
Open 2 months ago
adityapryg
Bump laravel/framework from 12.20.0 to 12.31.1

Steven-Juan/pemrograman-web-perpustakaan-profile #38

12.20.0 → 12.31.1 Minor PR
Open 2 months ago
Steven-Juan
build(deps): bump laravel/framework from 12.26.4 to 12.31.1

postaverse/postaverse #274

12.26.4 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
postaverse
Bump laravel/framework from 12.30.1 to 12.31.1 in /backend

Simounet/flox #171

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
Simounet
Composer(deps): Bump laravel/framework from 12.30.1 to 12.31.1

torrentpier/torrentpier #2162

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
torrentpier
Bump laravel/framework from 12.25.0 to 12.31.1

depanmonpc/cms-laravel #31

12.25.0 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.30.1 to 12.31.1

Shaz3e/s3-new-dashboard #77

12.30.1 → 12.31.1 Minor PR
Open 2 months ago 1 comment
Shaz3e
chore(deps): bump the laravel group with 3 updates

umaarov/goat-dev #57

12.30.1 → 12.31.1 Minor PR
Open 2 months ago 1 comment
umaarov
chore(deps): bump laravel/framework from 12.30.1 to 12.31.1

yoshii-uxv/franken-laravel #6

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
yoshii-uxv
build(deps): bump laravel/framework from 12.30.1 to 12.31.1

Rans7777/panel #349

12.30.1 → 12.31.1 Minor PR
Merged 2 months ago
Rans7777
chore(deps): bump laravel/framework from 12.30.1 to 12.31.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #594

12.30.1 → 12.31.1 Minor PR
Closed 2 months ago 2 comments
DevSkillsHQ
Bump laravel/framework from 12.30.1 to 12.31.1

Coho04/Ausbildungs-Laravel-Kurs #325

12.30.1 → 12.31.1 Minor PR
Merged 2 months ago
Coho04
chore(deps): bump laravel/framework from 12.1.0 to 12.31.1

jiannei/laravel-api-starter #534

12.1.0 → 12.31.1 Minor PR
Merged 2 months ago
jiannei
chore(deps): bump laravel/framework from 12.3.0 to 12.31.1

nickwelsh/laravel-12-inertia-react-starter #139

12.3.0 → 12.31.1 Minor PR
Open 2 months ago 1 comment
nickwelsh
chore(deps): bump laravel/framework from 12.28.1 to 12.31.1

ntjapps/base-app #957

12.28.1 → 12.31.1 Minor PR
Closed 2 months ago 2 comments
ntjapps
Bump laravel/framework from 12.25.0 to 12.31.1

depanmonpc/technic-et-plans-cms #35

12.25.0 → 12.31.1 Minor PR
Closed 2 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.31.1

15g-lucas/cesizen-api #49

12.16.0 → 12.31.1 Minor PR
Closed 2 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.31.1

TanNhatCMS/laravel-telegram-proxy #42

12.16.0 → 12.31.1 Minor PR
Open 2 months ago
TanNhatCMS
build(deps): bump laravel/framework from 12.30.1 to 12.31.1

bakaphp/kanvas-ecosystem-api #5862

12.30.1 → 12.31.1 Minor PR
Open 2 months ago
bakaphp
Bump laravel/framework from 12.25.0 to 12.31.1

su3-hokkaido/sample-laravel-sail #56

12.25.0 → 12.31.1 Minor PR
Closed 2 months ago 2 comments
su3-hokkaido
chore(deps): bump laravel/framework from 12.30.1 to 12.31.1

aquarion/thalium #1069

12.30.1 → 12.31.1 Minor PR
Merged 2 months ago
aquarion
build(deps): bump laravel/framework from 12.30.1 to 12.31.1

istic/wereabouts #63

12.30.1 → 12.31.1 Minor PR
Merged 2 months ago
istic
Bump laravel/framework from 11.45.1 to 12.31.1

code-with-sina/media #7

11.45.1 → 12.31.1 Major PR
Open 2 months ago
code-with-sina
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,321 (37.4%)
Merged 615 (17.4%)
Closed 1,275 (36.1%)
PR Types
Minor 2,745 (77.7%)
Major 248 (7.0%)
Patch 215 (6.1%)