Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,543 Dependabot PRs
Latest PR:
about 13 hours ago
Unique Repositories:
655 repositories
Unique Repos (30 days):
77 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 1 day ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 5 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 5 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 5 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 2 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
chore(deps): bump laravel/framework from 12.3.0 to 12.27.1

nickwelsh/laravel-12-inertia-react-starter #125

12.3.0 → 12.27.1 Minor PR
Open 3 months ago 1 comment
nickwelsh
build(deps): bump laravel/framework from 12.26.4 to 12.27.1

postaverse/postaverse #262

12.26.4 → 12.27.1 Minor PR
Closed 3 months ago 1 comment
postaverse
Bump laravel/framework from 12.25.0 to 12.27.0

depanmonpc/technic-et-plans-cms #18

12.25.0 → 12.27.0 Minor PR
Open 3 months ago
depanmonpc
Bump laravel/framework from 12.26.4 to 12.27.1

liberu-genealogy/genealogy-laravel #1284

12.26.4 → 12.27.1 Minor PR
Open 3 months ago
liberu-genealogy
Bump laravel/framework from 12.15.0 to 12.27.1

bonnie22/orkapos #29

12.15.0 → 12.27.1 Minor PR
Closed 3 months ago 1 comment
bonnie22
chore(deps): bump laravel/framework from 12.26.3 to 12.27.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #580

12.26.3 → 12.27.1 Minor PR
Closed 3 months ago 2 comments
DevSkillsHQ
build(deps): bump laravel/framework from 12.26.4 to 12.27.1

Rans7777/panel #324

12.26.4 → 12.27.1 Minor PR
Merged 3 months ago
Rans7777
composer: bump the production-deps group across 1 directory with 3 updates

sp-tarkov/forge #300

12.26.4 → 12.27.1 Minor PR
Merged 3 months ago
sp-tarkov
chore(deps): bump laravel/framework from 12.1.0 to 12.27.1

jiannei/laravel-api-starter #527

12.1.0 → 12.27.1 Minor PR
Closed 3 months ago 1 comment
jiannei
Bump laravel/framework from 12.16.0 to 12.27.0

TanNhatCMS/laravel-telegram-proxy #35

12.16.0 → 12.27.0 Minor PR
Open 3 months ago 1 comment
TanNhatCMS
Bump laravel/framework from 12.22.0 to 12.27.0

Shaz3e/s3-dashboard #120

12.22.0 → 12.27.0 Minor PR
Open 3 months ago 1 comment
Shaz3e
Bump laravel/framework from 12.16.0 to 12.27.0

15g-lucas/cesizen-api #42

12.16.0 → 12.27.0 Minor PR
Open 3 months ago 1 comment
15g-lucas
Bump laravel/framework from 12.25.0 to 12.27.0

su3-hokkaido/sample-laravel-sail #46

12.25.0 → 12.27.0 Minor PR
Open 3 months ago 1 comment
su3-hokkaido
build(deps): bump laravel/framework from 12.26.4 to 12.27.0

guanguans/laravel-skeleton #1459

12.26.4 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
guanguans
Bump laravel/framework from 12.26.4 to 12.27.0

aquarion/thalium #1049

12.26.4 → 12.27.0 Minor PR
Open 3 months ago
aquarion
Chore(deps): Bump laravel/framework from 12.13.0 to 12.27.0

mobarasa/qa-assessment #62

12.13.0 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
mobarasa
Bump the actions-deps group with 2 updates

rdrgzma/lms #23

12.26.4 → 12.27.0 Minor PR
Merged 3 months ago
rdrgzma
build(deps): bump laravel/framework from 12.26.4 to 12.27.0

bakaphp/kanvas-ecosystem-api #5539

12.26.4 → 12.27.0 Minor PR
Merged 3 months ago
bakaphp
Bump laravel/framework from 12.26.4 to 12.27.0

DiligentCreators/DC-Dashboard-Backend #117

12.26.4 → 12.27.0 Minor PR
Open 3 months ago
DiligentCreators
Bump laravel/framework from 12.23.1 to 12.27.0

toddy15/tetsche #482

12.23.1 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
toddy15
Bump laravel/framework from 12.25.0 to 12.27.0

omnicolor/commlink #2558

12.25.0 → 12.27.0 Minor PR
Open 3 months ago 4 comments
omnicolor
Bump laravel/framework from 12.26.4 to 12.27.0

liberusoftware/boilerplate-laravel #471

12.26.4 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
liberusoftware
fix: Bump laravel/framework from 12.26.4 to 12.27.0

cedricziel/faro-shop #1706

12.26.4 → 12.27.0 Minor PR
Open 3 months ago 1 comment
cedricziel
build(deps): bump the actions-deps group with 2 updates

jeffersongoncalves/filament-project-manager #22

12.26.4 → 12.27.0 Minor PR
Merged 3 months ago
jeffersongoncalves
Bump laravel/framework from 12.23.1 to 12.27.0

toddy15/dpains #451

12.23.1 → 12.27.0 Minor PR
Open 3 months ago
toddy15
Bump laravel/framework from 12.26.4 to 12.27.0

liberu-automation/automation-laravel #374

12.26.4 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
liberu-automation
Bump laravel/framework from 12.9.2 to 12.27.0

bushuliak/chatable #51

12.9.2 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
bushuliak
Bump laravel/framework from 12.26.4 to 12.27.0

liberu-ecommerce/ecommerce-laravel #574

12.26.4 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
liberu-ecommerce
Bump laravel/framework from 12.15.0 to 12.27.0

ahmednour1234/New-Task-Company- #62

12.15.0 → 12.27.0 Minor PR
Closed 3 months ago 1 comment
ahmednour1234
Bump laravel/framework from 12.25.0 to 12.26.4

depanmonpc/cms-laravel #15

12.25.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.24.0 to 12.26.4

Shaz3e/Laravel-Dev-Kit #134

12.24.0 → 12.26.4 Minor PR
Open 3 months ago
Shaz3e
Bump laravel/framework from 12.15.0 to 12.26.4

austinkregel/spork #158

12.15.0 → 12.26.4 Minor PR
Open 3 months ago
austinkregel
Bump laravel/framework from 12.21.0 to 12.26.4

calkeo/calkeo-terminal #53

12.21.0 → 12.26.4 Minor PR
Open 3 months ago
calkeo
Bump laravel/framework from 12.10.2 to 12.26.4 in /backend

jdu211171/jdutosho #109

12.10.2 → 12.26.4 Minor PR
Open 3 months ago
jdu211171
chore(deps): bump laravel/framework from 12.21.0 to 12.26.4 in the production-dependencies group

audunru/dynamic-cors #39

12.21.0 → 12.26.4 Minor PR
Open 3 months ago
audunru
build(deps): bump laravel/framework from 12.25.0 to 12.26.4

Monamoxie/flash-card #89

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
Monamoxie
Bump laravel/framework from 12.25.0 to 12.26.4

GuilhermeStracini/POC-GHActions-CI-PHPLaravel #308

12.25.0 → 12.26.4 Minor PR
Open 3 months ago 9 comments
GuilhermeStracini
deps: bump laravel/framework from 12.19.3 to 12.26.4 in /backend

yasu-programming/ai-driven-blog #43

12.19.3 → 12.26.4 Minor PR
Open 3 months ago 1 comment
yasu-programming
Bump laravel/framework from 12.21.0 to 12.26.4

archlich03/pbpis #87

12.21.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
archlich03
chore(deps): bump laravel/framework from 12.25.0 to 12.26.4

akrista/filamentry #6

12.25.0 → 12.26.4 Minor PR
Open 3 months ago 1 comment
akrista
build(deps): Bump the composer-minor-patch group across 1 directory with 2 updates

I-T-It/filament-scaffold #27

12.21.0 → 12.26.4 Minor PR
Open 3 months ago 2 comments
I-T-It
Bump laravel/framework from 12.14.1 to 12.26.4

Reykiraa/dss-food #40

12.14.1 → 12.26.4 Minor PR
Open 3 months ago
Reykiraa
Bump laravel/framework from 12.24.0 to 12.26.4

innocommerce/innoshop #277

12.24.0 → 12.26.4 Minor PR
Open 3 months ago
innocommerce
build(deps): bump laravel/framework from 12.8.1 to 12.26.4

muhismail015/laravel-starter #19

12.8.1 → 12.26.4 Minor PR
Open 3 months ago 1 comment
muhismail015
Bump laravel/framework from 12.8.1 to 12.26.4

atfromhome/laravel-starter #270

12.8.1 → 12.26.4 Minor PR
Open 3 months ago
atfromhome
Bump laravel/framework from 12.16.0 to 12.26.4

shirokovnv/agate #92

12.16.0 → 12.26.4 Minor PR
Open 3 months ago
shirokovnv
Bump laravel/framework from 12.21.0 to 12.26.4

NickC404/laravel-notes-app #6

12.21.0 → 12.26.4 Minor PR
Open 3 months ago 1 comment
NickC404
Bump laravel/framework from 12.3.0 to 12.26.4

luciano-capretti/travel-agency #45

12.3.0 → 12.26.4 Minor PR
Open 3 months ago
luciano-capretti
chore(deps): bump laravel/framework from 12.21.0 to 12.26.4 in the production-dependencies group

audunru/version-warning #56

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago
audunru
Bump laravel/framework from 12.25.0 to 12.26.4

playsaurus-inc/play-bench #111

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
playsaurus-inc
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,321 (37.3%)
Merged 615 (17.4%)
Closed 1,278 (36.1%)
PR Types
Minor 2,748 (77.7%)
Major 248 (7.0%)
Patch 215 (6.1%)