Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,548 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
657 repositories
Unique Repos (30 days):
68 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 5 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 8 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 8 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 8 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 5 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs (filtered by: Minor PRs )
RSS Feed Clear filter
chore(deps): bump laravel/framework from 12.20.0 to 12.26.4

zenphporg/foundation-site #36

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
zenphporg
Bump laravel/framework from 12.25.0 to 12.26.4

rmibelgium/wowbe #19

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
rmibelgium
chore(deps): bump laravel/framework from 12.1.0 to 12.26.4

jiannei/laravel-api-starter #526

12.1.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
jiannei
chore(deps): bump laravel/framework from 12.25.0 to 12.26.4

gunreip/tafel_wesseling #9

12.25.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
gunreip
chore(deps): bump laravel/framework from 12.3.0 to 12.26.4

nickwelsh/laravel-12-inertia-react-starter #124

12.3.0 → 12.26.4 Minor PR
Open 3 months ago 1 comment
nickwelsh
Bump laravel/framework from 12.25.0 to 12.26.4

SamuelMwangiW/tworra #763

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
SamuelMwangiW
Composer: Bump laravel/framework from 12.15.0 to 12.26.4

rawilk/randallwilk.dev #260

12.15.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
rawilk
build(deps): bump laravel/framework from 12.21.0 to 12.26.4

bervProject/belitung-information-center-api #631

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 2 comments
bervProject
Bump laravel/framework from 12.21.0 to 12.26.4

bervProject/LaravelBoilerplate #736

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 1 comment
bervProject
build(deps): bump laravel/framework from 12.21.0 to 12.26.4

bervProject/azure-resource-exploration-php-laravel #592

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 1 comment
bervProject
build(deps): bump the all group across 1 directory with 5 updates

TegarAditya/madyotomo #186

12.24.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
TegarAditya
Bump laravel/framework from 12.23.1 to 12.26.4

Samuel2025-IA/Cursos_Laravel #10

12.23.1 → 12.26.4 Minor PR
Open 3 months ago 1 comment
Samuel2025-IA
Bump laravel/framework from 12.25.0 to 12.26.4 in /backend

shrinha/evently #5

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
shrinha
composer: bump laravel/framework from 12.20.0 to 12.26.4

josephgodwinkimani/lara-nuxt-boilerplate #12

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
josephgodwinkimani
Bump the composer group across 1 directory with 2 updates

nirwanadoteth/cafe-pos #15

11.41.3 → 11.44.1 Minor PR
Merged 3 months ago 1 comment
nirwanadoteth
Bump laravel/framework from 11.3.0 to 11.44.1 in the composer group across 1 directory

lightofficialstudio/light-web-swensens-assignment #3

11.3.0 → 11.44.1 Minor PR
Open 3 months ago
lightofficialstudio
build(deps): bump the dependencies group in /backend with 2 updates

jnicrimi/laravel-playground #186

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
jnicrimi
Bump laravel/framework from 12.25.0 to 12.26.4

depanmonpc/technic-et-plans-cms #15

12.25.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.26.4

15g-lucas/cesizen-api #41

12.16.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.26.4

TanNhatCMS/laravel-telegram-proxy #33

12.16.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
TanNhatCMS
Chore(deps): Bump laravel/framework from 12.13.0 to 12.26.4

mobarasa/qa-assessment #61

12.13.0 → 12.26.4 Minor PR
Open 3 months ago
mobarasa
chore(deps): bump the php-dependencies group across 1 directory with 4 updates

laravelcm/filament-starter-kit #27

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
laravelcm
build: Bump laravel/framework from 12.18.0 to 12.26.4

kye-taylor/core #550

12.18.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
kye-taylor
build: Bump laravel/framework from 12.18.0 to 12.26.4

hazzas-99/core #688

12.18.0 → 12.26.4 Minor PR
Open 3 months ago
hazzas-99
build: Bump laravel/framework from 12.25.0 to 12.26.4

VATSIM-UK/core #4287

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
VATSIM-UK
Bump laravel/framework from 12.25.0 to 12.26.4

omnicolor/commlink #2550

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
omnicolor
Bump the laravel group with 2 updates

foxcoverts/climbing-team #460

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
foxcoverts
Bump laravel/framework from 12.9.2 to 12.26.4

bushuliak/chatable #50

12.9.2 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
bushuliak
Bump laravel/framework from 12.15.0 to 12.26.4

ahmednour1234/New-Task-Company- #60

12.15.0 → 12.26.4 Minor PR
Open 3 months ago
ahmednour1234
build(deps): bump the composer group across 1 directory with 2 updates

DEMS-Solution/portofolio #1

11.39.1 → 11.44.1 Minor PR
Merged 3 months ago
DEMS-Solution
Bump the composer group across 1 directory with 5 updates

nirwanadoteth/cafe-marcisa-laravel #2

11.16.0 → 11.44.1 Minor PR
Merged 3 months ago 1 comment
nirwanadoteth
Bump laravel/framework from 12.19.3 to 12.26.3

smal82/laravel-oxylabs-test #36

12.19.3 → 12.26.3 Minor PR
Open 3 months ago 1 comment
smal82
Bump laravel/framework from 12.10.2 to 12.26.3

SelectandStart/laravel-forum #47

12.10.2 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
SelectandStart
Bump laravel/framework from 12.21.0 to 12.26.3

floor9design-ltd/laravel-uuid-model-support #110

12.21.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
floor9design-ltd
chore(deps): bump laravel/framework from 12.25.0 to 12.26.3

iBotPeaches/LeafApp_Infinite #1808

12.25.0 → 12.26.3 Minor PR
Open 3 months ago
iBotPeaches
chore(deps): bump laravel/framework from 12.25.0 to 12.26.3 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #564

12.25.0 → 12.26.3 Minor PR
Open 3 months ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.23.1 to 12.26.3 in /backend

Simounet/flox #158

12.23.1 → 12.26.3 Minor PR
Open 3 months ago
Simounet
Composer(deps): bump laravel/framework from 12.21.0 to 12.26.3

torrentpier/torrentpier #2112

12.21.0 → 12.26.3 Minor PR
Open 3 months ago 1 comment
torrentpier
Bump laravel/framework from 12.25.0 to 12.26.3

depanmonpc/cms-laravel #13

12.25.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.20.0 to 12.26.3

Steven-Juan/pemrograman-web-perpustakaan-profile #25

12.20.0 → 12.26.3 Minor PR
Open 3 months ago
Steven-Juan
build(deps): bump laravel/framework from 12.25.0 to 12.26.3

postaverse/postaverse #260

12.25.0 → 12.26.3 Minor PR
Merged 3 months ago
postaverse
Bump laravel/framework from 12.15.0 to 12.26.3

bonnie22/orkapos #25

12.15.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
bonnie22
chore(deps): bump laravel/framework from 12.3.0 to 12.26.3

nickwelsh/laravel-12-inertia-react-starter #122

12.3.0 → 12.26.3 Minor PR
Open 3 months ago
nickwelsh
Chore(deps): Bump laravel/framework from 12.13.0 to 12.26.3

mobarasa/qa-assessment #60

12.13.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
mobarasa
chore(deps): bump laravel/framework from 12.1.0 to 12.26.3

jiannei/laravel-api-starter #525

12.1.0 → 12.26.3 Minor PR
Open 3 months ago
jiannei
Bump laravel/framework from 12.25.0 to 12.26.3

depanmonpc/technic-et-plans-cms #13

12.25.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.26.3

15g-lucas/cesizen-api #40

12.16.0 → 12.26.3 Minor PR
Closed 3 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.22.0 to 12.26.3

Shaz3e/s3-dashboard #116

12.22.0 → 12.26.3 Minor PR
Open 3 months ago 1 comment
Shaz3e
Bump laravel/framework from 12.9.2 to 12.26.3

bushuliak/chatable #49

12.9.2 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
bushuliak
Bump laravel/framework from 12.25.0 to 12.26.3

omnicolor/commlink #2542

12.25.0 → 12.26.3 Minor PR
Closed 3 months ago 1 comment
omnicolor
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.3%)
Merged 615 (17.3%)
Closed 1,285 (36.2%)
PR Types
Minor 2,755 (77.6%)
Major 250 (7.0%)
Patch 217 (6.1%)