Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,545 Dependabot PRs
Latest PR:
about 19 hours ago
Unique Repositories:
656 repositories
Unique Repos (30 days):
75 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 2 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 6 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 6 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 6 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 3 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
chore(deps): bump laravel/framework from 12.20.0 to 12.26.4

zenphporg/foundation-site #36

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
zenphporg
Bump laravel/framework from 12.25.0 to 12.26.4

rmibelgium/wowbe #19

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
rmibelgium
chore(deps): bump laravel/framework from 12.1.0 to 12.26.4

jiannei/laravel-api-starter #526

12.1.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
jiannei
chore(deps): bump laravel/framework from 12.25.0 to 12.26.4

gunreip/tafel_wesseling #9

12.25.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
gunreip
Bump laravel/framework from 12.26.2 to 12.26.4

Light-it-labs/laravel #314

12.26.2 → 12.26.4 Patch PR
Closed 3 months ago 1 comment
Light-it-labs
chore(deps): bump laravel/framework from 12.3.0 to 12.26.4

nickwelsh/laravel-12-inertia-react-starter #124

12.3.0 → 12.26.4 Minor PR
Open 3 months ago 1 comment
nickwelsh
Bump laravel/framework from 12.25.0 to 12.26.4

SamuelMwangiW/tworra #763

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
SamuelMwangiW
Composer: Bump laravel/framework from 12.15.0 to 12.26.4

rawilk/randallwilk.dev #260

12.15.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
rawilk
build(deps): bump laravel/framework from 12.21.0 to 12.26.4

bervProject/belitung-information-center-api #631

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 2 comments
bervProject
Bump laravel/framework from 12.21.0 to 12.26.4

bervProject/LaravelBoilerplate #736

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 1 comment
bervProject
build(deps): bump laravel/framework from 12.21.0 to 12.26.4

bervProject/azure-resource-exploration-php-laravel #592

12.21.0 → 12.26.4 Minor PR
Merged 3 months ago 1 comment
bervProject
build(deps): bump the all group across 1 directory with 5 updates

TegarAditya/madyotomo #186

12.24.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
TegarAditya
Bump laravel/framework from 12.23.1 to 12.26.4

Samuel2025-IA/Cursos_Laravel #10

12.23.1 → 12.26.4 Minor PR
Open 3 months ago 1 comment
Samuel2025-IA
chore(deps): bump laravel/framework from 12.26.3 to 12.26.4

ntjapps/base-app #911

12.26.3 → 12.26.4 Patch PR
Closed 3 months ago 2 comments
ntjapps
[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.26.4

GingertronMk1/stickee #225

11.45.2 → 12.26.4 Major PR
Closed 3 months ago 2 comments
GingertronMk1
Bump laravel/framework from 12.25.0 to 12.26.4 in /backend

shrinha/evently #5

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
shrinha
composer: bump laravel/framework from 12.20.0 to 12.26.4

josephgodwinkimani/lara-nuxt-boilerplate #12

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
josephgodwinkimani
Bump the composer group across 1 directory with 2 updates

nirwanadoteth/cafe-pos #15

11.41.3 → 11.44.1 Minor PR
Merged 3 months ago 1 comment
nirwanadoteth
Bump laravel/framework from 11.3.0 to 11.44.1 in the composer group across 1 directory

lightofficialstudio/light-web-swensens-assignment #3

11.3.0 → 11.44.1 Minor PR
Open 3 months ago
lightofficialstudio
chore(deps): bump laravel/framework from 12.26.3 to 12.26.4

rezagameralt1-dotcom/imdc #5

12.26.3 → 12.26.4 Patch PR
Open 3 months ago
rezagameralt1-dotcom
Bump laravel/framework from 12.26.3 to 12.26.4

ft72/Real-Estate- #4

12.26.3 → 12.26.4 Patch PR
Closed 3 months ago 1 comment
ft72
build(deps): bump the dependencies group in /backend with 2 updates

jnicrimi/laravel-playground #186

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
jnicrimi
Bump laravel/framework from 12.25.0 to 12.26.4

depanmonpc/technic-et-plans-cms #15

12.25.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
depanmonpc
Bump laravel/framework from 12.16.0 to 12.26.4

15g-lucas/cesizen-api #41

12.16.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.26.4

TanNhatCMS/laravel-telegram-proxy #33

12.16.0 → 12.26.4 Minor PR
Closed 3 months ago 2 comments
TanNhatCMS
Bump laravel/framework from 11.45.2 to 12.26.4

laracord/laracord.com #181

11.45.2 → 12.26.4 Major PR
Open 3 months ago
laracord
build(deps): bump laravel/framework from 12.26.3 to 12.26.4

bakaphp/kanvas-ecosystem-api #5503

12.26.3 → 12.26.4 Patch PR
Merged 3 months ago
bakaphp
Bump laravel/framework from 12.26.3 to 12.26.4

aquarion/thalium #1046

12.26.3 → 12.26.4 Patch PR
Merged 3 months ago
aquarion
Bump laravel/framework from 11.45.2 to 12.26.4

Arham1243/laravel-11-api-project-starter #6

11.45.2 → 12.26.4 Major PR
Closed 3 months ago 1 comment
Arham1243
build(deps): bump laravel/framework from 12.26.3 to 12.26.4

istic/wereabouts #40

12.26.3 → 12.26.4 Patch PR
Merged 3 months ago
istic
build(deps): bump laravel/framework from 12.26.3 to 12.26.4

guanguans/laravel-skeleton #1451

12.26.3 → 12.26.4 Patch PR
Open 3 months ago
guanguans
Chore(deps): Bump laravel/framework from 12.13.0 to 12.26.4

mobarasa/qa-assessment #61

12.13.0 → 12.26.4 Minor PR
Open 3 months ago
mobarasa
chore(deps): bump the php-dependencies group across 1 directory with 4 updates

laravelcm/filament-starter-kit #27

12.20.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
laravelcm
chore(deps): bump laravel/framework from 10.48.25 to 10.48.29

momentpay/laravel-crm #3

10.48.25 → 10.48.29 Patch PR
Open 3 months ago
momentpay
build(deps): bump laravel/framework from 12.26.3 to 12.26.4 in the actions-deps group

jeffersongoncalves/filament-project-manager #20

12.26.3 → 12.26.4 Patch PR
Merged 3 months ago
jeffersongoncalves
Bump laravel/framework from 12.26.3 to 12.26.4

liberusoftware/boilerplate-laravel #467

12.26.3 → 12.26.4 Patch PR
Merged 3 months ago
liberusoftware
build: Bump laravel/framework from 12.18.0 to 12.26.4

kye-taylor/core #550

12.18.0 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
kye-taylor
build: Bump laravel/framework from 12.18.0 to 12.26.4

hazzas-99/core #688

12.18.0 → 12.26.4 Minor PR
Open 3 months ago
hazzas-99
build: Bump laravel/framework from 12.25.0 to 12.26.4

VATSIM-UK/core #4287

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
VATSIM-UK
Bump laravel/framework from 12.25.0 to 12.26.4

omnicolor/commlink #2550

12.25.0 → 12.26.4 Minor PR
Merged 3 months ago
omnicolor
Bump the laravel group with 2 updates

foxcoverts/climbing-team #460

12.25.0 → 12.26.4 Minor PR
Open 3 months ago
foxcoverts
Bump laravel/framework from 12.9.2 to 12.26.4

bushuliak/chatable #50

12.9.2 → 12.26.4 Minor PR
Closed 3 months ago 1 comment
bushuliak
chore(deps): bump laravel/framework from 11.44.2 to 12.26.4 in /backend

zuyd-projects/cyber-scope #169

11.44.2 → 12.26.4 Major PR
Closed 3 months ago 1 comment
zuyd-projects
Bump laravel/framework from 12.26.3 to 12.26.4

liberu-automation/automation-laravel #371

12.26.3 → 12.26.4 Patch PR
Closed 3 months ago 1 comment
liberu-automation
Bump laravel/framework from 12.15.0 to 12.26.4

ahmednour1234/New-Task-Company- #60

12.15.0 → 12.26.4 Minor PR
Open 3 months ago
ahmednour1234
Bump laravel/framework from 12.26.3 to 12.26.4

liberu-ecommerce/ecommerce-laravel #571

12.26.3 → 12.26.4 Patch PR
Closed 3 months ago 1 comment
liberu-ecommerce
fix: Bump laravel/framework from 12.26.3 to 12.26.4

cedricziel/faro-shop #1702

12.26.3 → 12.26.4 Patch PR
Open 3 months ago 1 comment
cedricziel
build(deps): bump the composer group across 1 directory with 2 updates

DEMS-Solution/portofolio #1

11.39.1 → 11.44.1 Minor PR
Merged 3 months ago
DEMS-Solution
Bump laravel/framework from 11.45.2 to 12.26.3

laravelio/paste.laravel.io #364

11.45.2 → 12.26.3 Major PR
Open 3 months ago
laravelio
Bump the composer group across 1 directory with 5 updates

nirwanadoteth/cafe-marcisa-laravel #2

11.16.0 → 11.44.1 Minor PR
Merged 3 months ago 1 comment
nirwanadoteth
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.4%)
Merged 615 (17.3%)
Closed 1,282 (36.2%)
PR Types
Minor 2,752 (77.6%)
Major 250 (7.1%)
Patch 217 (6.1%)