Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,535 Dependabot PRs
Latest PR:
about 10 hours ago
Unique Repositories:
653 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated about 15 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 4 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 4 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 1 day ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
Bump laravel/framework from 12.25.0 to 12.29.0

depanmonpc/cms-laravel #26

12.25.0 → 12.29.0 Minor PR
Open 2 months ago
depanmonpc
chore(deps): bump the laravel group with 3 updates

umaarov/goat-dev #46

12.28.1 → 12.29.0 Minor PR
Open 2 months ago 3 comments
umaarov
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

Rans7777/panel #339

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
Rans7777
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #588

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.28.1 to 12.29.0

Coho04/Ausbildungs-Laravel-Kurs #316

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
Coho04
Bump laravel/framework from 12.26.4 to 12.29.0

liberu-genealogy/genealogy-laravel #1311

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberu-genealogy
Bump laravel/framework from 12.28.1 to 12.29.0

madewithlove/semver #1064

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
madewithlove
chore(deps): bump laravel/framework from 12.3.0 to 12.29.0

nickwelsh/laravel-12-inertia-react-starter #135

12.3.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
nickwelsh
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

ntjapps/base-app #943

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
ntjapps
Bump laravel/framework from 12.25.0 to 12.29.0

depanmonpc/technic-et-plans-cms #27

12.25.0 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.29.0

15g-lucas/cesizen-api #45

12.16.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.29.0

TanNhatCMS/laravel-telegram-proxy #38

12.16.0 → 12.29.0 Minor PR
Open 2 months ago 1 comment
TanNhatCMS
[DEPS][COMPOSER]: Bump laravel/framework from 11.46.0 to 12.29.0

GingertronMk1/stickee #240

11.46.0 → 12.29.0 Major PR
Closed 2 months ago 2 comments
GingertronMk1
Bump laravel/framework from 12.22.0 to 12.29.0

Shaz3e/s3-dashboard #125

12.22.0 → 12.29.0 Minor PR
Open 2 months ago
Shaz3e
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

bakaphp/kanvas-ecosystem-api #5705

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
bakaphp
Bump laravel/framework from 12.28.1 to 12.29.0

ghostwriter/draft #259

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
ghostwriter
Bump laravel/framework from 12.25.0 to 12.29.0

su3-hokkaido/sample-laravel-sail #54

12.25.0 → 12.29.0 Minor PR
Closed 2 months ago 2 comments
su3-hokkaido
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

aquarion/thalium #1064

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
aquarion
Bump laravel/framework from 11.45.2 to 12.29.0

Arham1243/laravel-11-api-project-starter #11

11.45.2 → 12.29.0 Major PR
Closed 2 months ago 1 comment
Arham1243
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

istic/wereabouts #53

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
istic
Chore(deps): Bump laravel/framework from 12.13.0 to 12.29.0

mobarasa/qa-assessment #66

12.13.0 → 12.29.0 Minor PR
Open 2 months ago
mobarasa
Bump the actions-deps group with 2 updates

rdrgzma/lms #36

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
rdrgzma
build(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/social-accounts #63

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/version-warning #59

12.26.4 → 12.29.0 Minor PR
Open 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/model-history #58

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in the production-dependencies group

audunru/memory-usage #59

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
audunru
chore(deps): bump laravel/framework from 12.26.4 to 12.29.0 in the production-dependencies group

audunru/dynamic-cors #42

12.26.4 → 12.29.0 Minor PR
Merged 2 months ago
audunru
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0 in the production-dependencies group

audunru/export-response #62

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
audunru
build(deps): bump the production-dependencies group with 2 updates

audunru/config-secrets #68

12.26.4 → 12.29.0 Minor PR
Open 2 months ago
audunru
Bump laravel/framework from 12.28.1 to 12.29.0

toddy15/tetsche #490

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
toddy15
Bump laravel/framework from 12.28.1 to 12.29.0

toddy15/dpains #457

12.28.1 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
toddy15
Bump laravel/framework from 12.26.4 to 12.29.0

liberusoftware/boilerplate-laravel #489

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberusoftware
Bump laravel/framework from 12.9.2 to 12.29.0

bushuliak/chatable #54

12.9.2 → 12.29.0 Minor PR
Open 2 months ago
bushuliak
build(deps): bump the actions-deps group with 2 updates

jeffersongoncalves/teamkitv4 #3

12.28.1 → 12.29.0 Minor PR
Merged 2 months ago
jeffersongoncalves
Bump laravel/framework from 12.15.0 to 12.29.0

ahmednour1234/New-Task-Company- #67

12.15.0 → 12.29.0 Minor PR
Open 2 months ago
ahmednour1234
Bump laravel/framework from 12.28.1 to 12.29.0

liberu-ecommerce/ecommerce-laravel #593

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
liberu-ecommerce
fix: Bump laravel/framework from 12.28.1 to 12.29.0

cedricziel/faro-shop #1727

12.28.1 → 12.29.0 Minor PR
Open 2 months ago 1 comment
cedricziel
Bump laravel/framework from 12.26.4 to 12.29.0

luizcarlos42/ecommerce-laravel #14

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
luizcarlos42
Bump laravel/framework from 12.26.4 to 12.29.0

liberu-social-network/social-network-laravel #336

12.26.4 → 12.29.0 Minor PR
Closed 2 months ago 1 comment
liberu-social-network
chore(deps): bump laravel/framework from 12.28.1 to 12.29.0

pridit-a2oa/leaderboard #609

12.28.1 → 12.29.0 Minor PR
Open 2 months ago
pridit-a2oa
Bump laravel/framework from 11.44.2 to 12.29.0

simonebogni/portfolio #181

11.44.2 → 12.29.0 Major PR
Open 2 months ago 2 comments
simonebogni
build(deps): bump laravel/framework from 12.28.1 to 12.29.0

bigpixelrocket/laravel-omakase #126

12.28.1 → 12.29.0 Minor PR
Open 2 months ago 1 comment
bigpixelrocket
(chore): Bump the composer group with 5 updates

yardinternet/wp-user-roles #64

10.48.29 → 10.49.0 Minor PR
Open 2 months ago 2 comments
yardinternet
chore(deps): bump laravel/framework from 11.45.3 to 11.46.0 in the minor-and-patch group

timkley/blockgradient #87

11.45.3 → 11.46.0 Minor PR
Merged 2 months ago
timkley
chore(deps): bump the minor-and-patch group with 2 updates

timkley/deine-mutter #53

11.45.3 → 11.46.0 Minor PR
Merged 2 months ago
timkley
Bump laravel/framework from 12.12.0 to 12.28.1 in the production-dependencies group

adityapryg/bm-payroll #1

12.12.0 → 12.28.1 Minor PR
Closed 2 months ago 3 comments
adityapryg
Bump laravel/framework from 12.12.0 to 12.28.1 in the production-dependencies group

pyesta25/Laravel_Development_3 #1

12.12.0 → 12.28.1 Minor PR
Open 2 months ago
pyesta25
Bump laravel/framework from 12.26.4 to 12.28.1

luizcarlos42/ecommerce-laravel #10

12.26.4 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
luizcarlos42
chore(deps): bump the php-dependencies group across 1 directory with 19 updates

laravelcm/laravel.cm #395

12.14.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
laravelcm
Bump the composer group across 1 directory with 5 updates

logreg-n-coffee/laravel-chirper #2

10.11.0 → 10.48.29 Minor PR
Merged 3 months ago
logreg-n-coffee
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,321 (37.4%)
Merged 615 (17.4%)
Closed 1,275 (36.1%)
PR Types
Minor 2,745 (77.7%)
Major 248 (7.0%)
Patch 215 (6.1%)