Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,546 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
656 repositories
Unique Repos (30 days):
69 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 3 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 7 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 7 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 7 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 3 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs (filtered by: Closed )
RSS Feed Clear filter
build(deps): Bump laravel/framework from 11.6.0 to 11.41.3

VATSIM-UK/uk-controller-api #1710

11.6.0 → 11.41.3 Minor PR
Closed 10 months ago 2 comments
VATSIM-UK
Bump laravel/framework from 11.30.0 to 11.41.3

gredevelopment/ecommerce_test_project #23

11.30.0 → 11.41.3 Minor PR
Closed 10 months ago 1 comment
gredevelopment
Composer: Bump laravel/framework from 11.34.2 to 11.41.3

rawilk/randallwilk.dev #220

11.34.2 → 11.41.3 Minor PR
Closed 10 months ago
rawilk
chore/dependabot: bump laravel/framework from 11.28.1 to 11.38.2

Psarmmiey/my-learning-journal-task #221

11.28.1 → 11.38.2 Minor PR
Closed 11 months ago 1 comment
Psarmmiey
Bump laravel/framework from 11.35.0 to 11.36.1

marksuth/marksuth.dev #99

11.35.0 → 11.36.1 Minor PR
Closed 11 months ago
marksuth
Bump the composer group across 1 directory with 6 updates

clvnknt/ipt10-rest-api-server-scribe #2

9.35.1 → 9.52.17 Minor PR
Closed 12 months ago
clvnknt
Bump laravel/framework from 11.23.5 to 11.31.0

UtrechtUniversity/msl_api #84

11.23.5 → 11.31.0 Minor PR
Closed 12 months ago
UtrechtUniversity
Bump laravel/framework from 8.83.7 to 8.83.28

Zoha/laravel-meta #39

8.83.7 → 8.83.28 Patch PR
Closed about 1 year ago 1 comment
Zoha
Bump laravel/framework from 8.83.27 to 8.83.28

Ecodenl/Woningdossier #1814

8.83.27 → 8.83.28 Patch PR
Closed about 1 year ago
Ecodenl
build(deps): bump laravel/framework from 10.48.8 to 10.48.23

koel/koel #1876

10.48.8 → 10.48.23 Patch PR
Closed about 1 year ago 1 comment
koel
Bump laravel/framework from 10.48.20 to 10.48.23

luizcsbh/chat-system #3

10.48.20 → 10.48.23 Patch PR
Closed about 1 year ago 1 comment
luizcsbh
build(deps): bump laravel/framework from 10.48.20 to 10.48.23

ArRahmaan17/pos-laravel #8

10.48.20 → 10.48.23 Patch PR
Closed about 1 year ago
ArRahmaan17
Bump laravel/framework from 11.7.0 to 11.31.0

gloggi/qualix #363

11.7.0 → 11.31.0 Minor PR
Closed about 1 year ago 1 comment
gloggi
Bump laravel/framework from 10.21.1 to 10.48.23

EginKaman/rss-feed-bot #38

10.21.1 → 10.48.23 Minor PR
Closed about 1 year ago 1 comment
EginKaman
Bump laravel/framework from 11.22.0 to 11.31.0

eurofurence/fursuit-reg-tool #50

11.22.0 → 11.31.0 Minor PR
Closed about 1 year ago
eurofurence
Bump laravel/framework from 11.21.0 to 11.31.0

gprs-solutions/gprs-api #6

11.21.0 → 11.31.0 Minor PR
Closed about 1 year ago 1 comment
gprs-solutions
Bump laravel/framework from 11.11.1 to 11.31.0

hinoja/EstateProject- #7

11.11.1 → 11.31.0 Minor PR
Closed about 1 year ago 1 comment
hinoja
Bump laravel/framework from 8.57.0 to 8.75.0 in /vapi in the composer group across 1 directory

abdulrahman305/vapi #3

8.57.0 → 8.75.0 Minor PR
Closed over 1 year ago 2 comments
abdulrahman305
build: Bump laravel/framework from 10.46.0 to 10.48.12

kye-taylor/core #483

10.46.0 → 10.48.12 Minor PR
Closed over 1 year ago 1 comment
kye-taylor
chore(deps): bump laravel/framework from 10.35.0 to 10.48.3

kishieel/laravel-e1CrfVaR #64

10.35.0 → 10.48.3 Minor PR
Closed over 1 year ago
kishieel
build: Bump laravel/framework from 10.29.0 to 10.42.0

hazzas-99/core #580

10.29.0 → 10.42.0 Minor PR
Closed almost 2 years ago 1 comment
hazzas-99
build(deps): bump laravel/framework from 9.36.3 to 9.52.4 in /backend

jphacks/F_2208 #294

9.36.3 → 9.52.4 Minor PR
Closed almost 3 years ago 2 comments
jphacks
Bump laravel/framework from 9.38.0 to 9.52.4

nzian/nexopos #125

9.38.0 → 9.52.4 Minor PR
Closed almost 3 years ago 1 comment
nzian
Bump laravel/framework from 8.40.0 to 8.75.0

KalimeroMK/tge #29

8.40.0 → 8.75.0 Minor PR
Closed almost 4 years ago
KalimeroMK
Bump laravel/framework from 5.8.12 to 5.8.38 in /Laravel

phunsanit/snippets #5

5.8.12 → 5.8.38 Patch PR
Closed almost 4 years ago 1 comment
phunsanit
Bump laravel/framework from 5.7.29 to 5.8.38

2ppaamm/capstoneapi #10

5.7.29 → 5.8.38 Minor PR
Closed almost 4 years ago 1 comment
2ppaamm
Bump laravel/framework from 6.5.2 to 6.18.43 in /finfood-api

williamtrindade/college-project-restaurant-management-system #14

6.5.2 → 6.18.43 Minor PR
Closed over 4 years ago
williamtrindade
Bump laravel/framework from 6.9.0 to 6.18.43

verza22/glarium #13

6.9.0 → 6.18.43 Minor PR
Closed over 4 years ago
verza22
Bump laravel/framework from 5.8.38 to 6.20.26

erfantkerfan/olympiad #3

5.8.38 → 6.20.26 Major PR
Closed over 4 years ago 2 comments
erfantkerfan
Bump laravel/framework from 7.15.0 to 7.30.4

alexlatam/Eutuxia #8

7.15.0 → 7.30.4 Minor PR
Closed almost 5 years ago 1 comment
alexlatam
Bump laravel/framework from 7.14.1 to 7.30.4

sharifulz/LaravelBegin #2

7.14.1 → 7.30.4 Minor PR
Closed almost 5 years ago 1 comment
Sharifulz
Bump laravel/framework from 7.10.2 to 7.30.4

urian121/Reconocimiento-de-Voz-a-Texto-con-Php-Laravel-Jquery-Javascript-and-Mysql #3

7.10.2 → 7.30.4 Minor PR
Closed almost 5 years ago 2 comments
urian121
Bump laravel/framework from 7.19.0 to 7.30.4

fernastereo/fokoretail-test #11

7.19.0 → 7.30.4 Minor PR
Closed almost 5 years ago 1 comment
fernastereo
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.4%)
Merged 615 (17.3%)
Closed 1,283 (36.2%)
PR Types
Minor 2,753 (77.6%)
Major 250 (7.1%)
Patch 217 (6.1%)