Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,535 Dependabot PRs
Latest PR:
about 10 hours ago
Unique Repositories:
653 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated about 16 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 4 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 4 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 1 day ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
Bump the composer group across 1 directory with 5 updates

logreg-n-coffee/laravel-notes-api-playground #2

10.17.1 → 10.48.29 Minor PR
Open 3 months ago
logreg-n-coffee
Bump the composer group across 2 directories with 5 updates

rezalas/riftshadow #278

10.48.23 → 10.48.29 Patch PR
Merged 3 months ago
rezalas
Bump laravel/framework from 12.25.0 to 12.28.1

su3-hokkaido/sample-laravel-sail #48

12.25.0 → 12.28.1 Minor PR
Closed 3 months ago 2 comments
su3-hokkaido
Bump laravel/framework from 11.45.1 to 11.46.0

ZachWatkins/Rememboard #224

11.45.1 → 11.46.0 Minor PR
Open 3 months ago
ZachWatkins
Bump laravel/framework from 11.45.3 to 11.46.0

ZachWatkins/laravel-template #342

11.45.3 → 11.46.0 Minor PR
Merged 3 months ago
ZachWatkins
Bump laravel/framework from 10.12.0 to 10.48.29

antonioanerao/openmu-website #19

10.12.0 → 10.48.29 Minor PR
Merged 3 months ago
antonioanerao
Bump the dependencies group with 4 updates

sertxudeveloper/sertxu.dev #247

12.26.4 → 12.28.1 Minor PR
Merged 3 months ago
sertxudeveloper
build(deps): bump laravel/framework from 12.26.4 to 12.28.1

Monamoxie/flash-card #90

12.26.4 → 12.28.1 Minor PR
Merged 3 months ago
Monamoxie
deps: bump laravel/framework from 12.19.3 to 12.28.1 in /backend

yasu-programming/ai-driven-blog #45

12.19.3 → 12.28.1 Minor PR
Closed 3 months ago 2 comments
yasu-programming
Bump laravel/framework from 12.15.0 to 12.28.1

austinkregel/spork #161

12.15.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
austinkregel
Bump laravel/framework from 12.24.0 to 12.28.1

Shaz3e/Laravel-Dev-Kit #138

12.24.0 → 12.28.1 Minor PR
Closed 3 months ago 2 comments
Shaz3e
Bump laravel/framework from 12.1.1 to 12.28.1

samharvey44/strava-dsw-insights #94

12.1.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
samharvey44
Bump laravel/framework from 12.3.0 to 12.28.1

MercedesBanales/onboarding-laravel-travel-agency #31

12.3.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
MercedesBanales
Bump laravel/framework from 12.15.0 to 12.28.1

Uspacy/app-laravel-template #149

12.15.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
Uspacy
chore(deps): bump laravel/framework from 12.12.0 to 12.28.1

asbiin/laravel-webauthn-example #1177

12.12.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
asbiin
chore(deps): bump the production-dependencies group with 3 updates

LycheeOrg/Lychee #3678

12.26.3 → 12.28.1 Minor PR
Merged 3 months ago 1 comment
LycheeOrg
Bump laravel/framework from 12.24.0 to 12.28.1

Clutz88/wedding #102

12.24.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
Clutz88
Bump laravel/framework from 11.45.2 to 12.28.1

a1383n/secure-proxy #312

11.45.2 → 12.28.1 Major PR
Closed 3 months ago 1 comment
a1383n
chore(deps): bump laravel/framework from 12.20.0 to 12.28.1

druidweb/druid #51

12.20.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
druidweb
Bump laravel/framework from 12.14.1 to 12.28.1

Reykiraa/dss-food #41

12.14.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
Reykiraa
chore(deps): bump laravel/framework from 11.45.2 to 12.28.1 in /backend

lomendor/Project-Dixis #130

11.45.2 → 12.28.1 Major PR
Merged 3 months ago 3 comments
lomendor
Bump laravel/framework from 12.1.1 to 12.28.1

hmayer/my-laravel-boilerplate #87

12.1.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
hmayer
Bump laravel/framework from 12.26.4 to 12.28.1

playsaurus-inc/play-bench #119

12.26.4 → 12.28.1 Minor PR
Open 3 months ago
playsaurus-inc
Bump laravel/framework from 12.3.0 to 12.28.1

luciano-capretti/travel-agency #50

12.3.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
luciano-capretti
build(deps): bump laravel/framework from 12.26.4 to 12.28.1

openmultiplechoice/openmultiplechoice #1259

12.26.4 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
openmultiplechoice
Bump laravel/framework from 12.25.0 to 12.28.1 in /backend

shrinha/evently #11

12.25.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
shrinha
chore: bump laravel/framework from 12.19.3 to 12.28.1

devenjahnke/laravel-template #21

12.19.3 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
devenjahnke
Chore(deps): Bump the laravel-prod-dependencies group with 2 updates

metanull/inventory-app #308

12.26.4 → 12.28.1 Minor PR
Merged 3 months ago
metanull
Bump laravel/framework from 12.28.0 to 12.28.1

AkibaAT/fvn.li #139

12.28.0 → 12.28.1 Patch PR
Closed 3 months ago 1 comment
AkibaAT
chore(deps): bump laravel/framework from 12.18.0 to 12.28.1

clys-man/laravel-api-starter-kit #36

12.18.0 → 12.28.1 Minor PR
Open 3 months ago 1 comment
clys-man
build(deps): bump the minor-and-patch group with 2 updates

timkley/zenith #63

12.25.0 → 12.28.1 Minor PR
Open 3 months ago
timkley
Bump laravel/framework from 12.26.4 to 12.28.1 in /backend

ModWorkshop/site #518

12.26.4 → 12.28.1 Minor PR
Open 3 months ago
ModWorkshop
Bump laravel/framework from 12.21.0 to 12.28.1 in /backend

luismanuel391/hievents #16

12.21.0 → 12.28.1 Minor PR
Open 3 months ago
luismanuel391
Bump laravel/framework from 12.26.4 to 12.28.1

Vento-Nuenenen/NVentory #129

12.26.4 → 12.28.1 Minor PR
Open 3 months ago
Vento-Nuenenen
chore(deps): bump laravel/framework from 11.45.2 to 11.45.3 in the minor-and-patch group

timkley/blockgradient #85

11.45.2 → 11.45.3 Patch PR
Open 3 months ago
timkley
chore(deps): bump laravel/framework from 12.26.3 to 12.28.1

rezagameralt1-dotcom/imdc #10

12.26.3 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
rezagameralt1-dotcom
Bump laravel/framework from 12.25.0 to 12.28.1

amandaliya29/payment-app-backend #7

12.25.0 → 12.28.1 Minor PR
Open 3 months ago
amandaliya29
Bump laravel/framework from 12.8.1 to 12.28.1

simpson-getting-crazy/personal-finance-tracker #28

12.8.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
simpson-getting-crazy
Bump laravel/framework from 12.24.0 to 12.28.1

Mavv3006/BlueBirdBigBand #1091

12.24.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
Mavv3006
chore(deps): bump laravel/framework from 12.25.0 to 12.28.1

tyler36/dependabot-gha #106

12.25.0 → 12.28.1 Minor PR
Open 3 months ago
tyler36
Bump laravel/framework from 12.24.0 to 12.28.1

Nicklas373/Hana-PDF #435

12.24.0 → 12.28.1 Minor PR
Merged 3 months ago
Nicklas373
build(deps): bump laravel/framework from 12.25.0 to 12.28.1

yajra/yajrabox.com #176

12.25.0 → 12.28.1 Minor PR
Merged 3 months ago
yajra
Bump laravel/framework from 12.25.0 to 12.28.1

N3XT0R/laravel-migration-generator #15

12.25.0 → 12.28.1 Minor PR
Closed 3 months ago 2 comments
N3XT0R
Bump the production-dependencies group across 1 directory with 2 updates

Konstantin108/laravel-docker #14

12.10.2 → 12.28.1 Minor PR
Open 3 months ago
Konstantin108
chore(deps)(deps): bump laravel/framework from 12.20.0 to 12.28.1 in /backend

motowo/md_blog #85

12.20.0 → 12.28.1 Minor PR
Closed 3 months ago 2 comments
motowo
chore(deps): bump laravel/framework from 12.18.0 to 12.28.1

modus-digital/laravel-starter-kit #34

12.18.0 → 12.28.1 Minor PR
Open 3 months ago
modus-digital
deps(deps): bump laravel/framework from 12.25.0 to 12.28.1 in /src

ryoooosk/frankenphp-with-inertia-demo #87

12.25.0 → 12.28.1 Minor PR
Merged 3 months ago
ryoooosk
Bump laravel/framework from 12.17.0 to 12.28.1

Light-it-labs/travel-agency #22

12.17.0 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
Light-it-labs
composer: bump laravel/framework from 12.14.1 to 12.28.1

umanda/saminda #28

12.14.1 → 12.28.1 Minor PR
Closed 3 months ago 1 comment
umanda
chore(deps): bump laravel/framework from 12.17.0 to 12.28.1

Talpx1/simonecerruti.com #33

12.17.0 → 12.28.1 Minor PR
Open 3 months ago 1 comment
Talpx1
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,321 (37.4%)
Merged 615 (17.4%)
Closed 1,275 (36.1%)
PR Types
Minor 2,745 (77.7%)
Major 248 (7.0%)
Patch 215 (6.1%)