Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,535 Dependabot PRs
Latest PR:
about 15 hours ago
Unique Repositories:
653 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated about 20 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 4 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 5 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 1 day ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
Bump laravel/framework from 12.28.1 to 12.29.0

Helical-Games/forge #499

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
Helical-Games
Bump laravel/framework from 12.28.1 to 12.29.0

EncoreDigitalGroup/laravel-cache-prune #59

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
EncoreDigitalGroup
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

steven-streller/master-laravel #101

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
steven-streller
Bump laravel/framework from 12.19.3 to 12.29.0

smal82/laravel-oxylabs-test #54

12.19.3 → 12.29.0 Minor PR
Open 2 months ago 2 comments
smal82
chore(deps): Bump laravel/framework from 12.28.1 to 12.29.0 in /src

moeyashi/template-laravel-on-vscode-remote-container #223

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
moeyashi
chore(deps): bump laravel/framework from 12.28.0 to 12.29.0 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #573

12.28.0 → 12.29.0 Minor PR
Merged 2 months ago 1 comment
DevSkillsHQ
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

kolaente/futter.rocks #100

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
kolaente
Bump laravel/framework from 12.28.1 to 12.29.0

SelectandStart/laravel-forum #53

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
SelectandStart
Bump laravel/framework from 12.26.4 to 12.29.0

liberu-real-estate/real-estate-laravel #1150

12.26.4 → 12.29.0 Minor PR
Open 2 months ago
liberu-real-estate
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

iBotPeaches/LeafApp_Infinite #1831

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
iBotPeaches
Bump laravel/framework from 12.28.1 to 12.29.0

floor9design-ltd/laravel-uuid-model-support #120

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
floor9design-ltd
Bump laravel/framework from 12.26.3 to 12.29.0

ft72/Real-Estate- #20

12.26.3 → 12.29.0 Minor PR
Open 2 months ago
ft72
Bump laravel/framework from 12.28.1 to 12.29.0

liberu-accounting/accounting-laravel #645

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberu-accounting
Bump laravel/framework from 12.20.0 to 12.29.0

Steven-Juan/pemrograman-web-perpustakaan-profile #33

12.20.0 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
Steven-Juan
build(deps): bump laravel/framework from 12.26.4 to 12.29.0

postaverse/postaverse #268

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
postaverse
Composer(deps): Bump laravel/framework from 12.27.0 to 12.29.0

torrentpier/torrentpier #2138

12.27.0 → 12.29.0 Minor PR
Open 2 months ago
torrentpier
Bump laravel/framework from 12.25.0 to 12.29.0

depanmonpc/cms-laravel #26

12.25.0 → 12.29.0 Minor PR
Open 2 months ago
depanmonpc
chore(deps): bump the laravel group with 3 updates

umaarov/goat-dev #46

12.28.1 → 12.29.0 Minor PR
Open 2 months ago 3 comments
umaarov
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

Rans7777/panel #339

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
Rans7777
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #588

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.28.1 to 12.29.0

Coho04/Ausbildungs-Laravel-Kurs #316

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
Coho04
Bump laravel/framework from 12.26.4 to 12.29.0

liberu-genealogy/genealogy-laravel #1311

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberu-genealogy
Bump laravel/framework from 12.28.1 to 12.29.0

madewithlove/semver #1064

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
madewithlove
chore(deps): bump laravel/framework from 12.3.0 to 12.29.0

nickwelsh/laravel-12-inertia-react-starter #135

12.3.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
nickwelsh
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

ntjapps/base-app #943

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
ntjapps
Bump laravel/framework from 12.25.0 to 12.29.0

depanmonpc/technic-et-plans-cms #27

12.25.0 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.29.0

15g-lucas/cesizen-api #45

12.16.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.29.0

TanNhatCMS/laravel-telegram-proxy #38

12.16.0 → 12.29.0 Minor PR
Open 2 months ago 1 comment
TanNhatCMS
Bump laravel/framework from 12.22.0 to 12.29.0

Shaz3e/s3-dashboard #125

12.22.0 → 12.29.0 Minor PR
Open 2 months ago
Shaz3e
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

bakaphp/kanvas-ecosystem-api #5705

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
bakaphp
Bump laravel/framework from 12.28.1 to 12.29.0

ghostwriter/draft #259

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
ghostwriter
Bump laravel/framework from 12.25.0 to 12.29.0

su3-hokkaido/sample-laravel-sail #54

12.25.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
su3-hokkaido
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

aquarion/thalium #1064

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
aquarion
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

istic/wereabouts #53

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
istic
Chore(deps): Bump laravel/framework from 12.13.0 to 12.29.0

mobarasa/qa-assessment #66

12.13.0 → 12.29.0 Minor PR
Open 2 months ago
mobarasa
Bump the actions-deps group with 2 updates

rdrgzma/lms #36

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
rdrgzma
build(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/social-accounts #63

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/version-warning #59

12.26.4 → 12.29.0 Minor PR
Open 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/model-history #58

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in the production-dependencies group

audunru/memory-usage #59

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/dynamic-cors #42

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in the production-dependencies group

audunru/export-response #62

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
audunru
build(deps): bump the production-dependencies group with 2 updates

audunru/config-secrets #68

12.26.4 → 12.29.0 Minor PR
Open 2 months ago
audunru
Bump laravel/framework from 12.28.1 to 12.29.0

toddy15/tetsche #490

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
toddy15
Bump laravel/framework from 12.28.1 to 12.29.0

toddy15/dpains #457

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
toddy15
Bump laravel/framework from 12.26.4 to 12.29.0

liberusoftware/boilerplate-laravel #489

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberusoftware
Bump laravel/framework from 12.9.2 to 12.29.0

bushuliak/chatable #54

12.9.2 → 12.29.0 Minor PR
Open 2 months ago
bushuliak
build(deps): bump the actions-deps group with 2 updates

jeffersongoncalves/teamkitv4 #3

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
jeffersongoncalves
Bump laravel/framework from 12.15.0 to 12.29.0

ahmednour1234/New-Task-Company- #67

12.15.0 → 12.29.0 Minor PR
Open 2 months ago
ahmednour1234
Bump laravel/framework from 12.28.1 to 12.29.0

liberu-ecommerce/ecommerce-laravel #593

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
liberu-ecommerce
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,321 (37.4%)
Merged 615 (17.4%)
Closed 1,275 (36.1%)
PR Types
Minor 2,745 (77.7%)
Major 248 (7.0%)
Patch 215 (6.1%)