`laravel/framework`

Ecosystem:
packagist

Package URL:
pkg:composer/laravel/framework

Total PRs:
3,544 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
656 repositories

Unique Repos (30 days):
78 repositories

Security Advisories

Laravel Guard bypass in Eloquent models

GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 1 day ago

In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...

Query Binding Exploitation

GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 5 days ago

### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...

Laravel Sensitive Data Exposure

GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 5 days ago

Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.

Improper Input Validation in Laravel

GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 5 days ago

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...

SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database

GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 2 days ago

### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...

View all 23 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

[DEPS][COMPOSER]: Bump laravel/framework from 11.46.0 to 12.29.0

GingertronMk1/stickee #240

11.46.0 → 12.29.0 Major PR

Closed 2 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.29.0

Arham1243/laravel-11-api-project-starter #11

11.45.2 → 12.29.0 Major PR

Closed 2 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.29.0

simonebogni/portfolio #181

11.44.2 → 12.29.0 Major PR

Open 2 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.28.1

a1383n/secure-proxy #312

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 1 comment

chore(deps): bump laravel/framework from 11.45.2 to 12.28.1 in /backend

lomendor/Project-Dixis #130

11.45.2 → 12.28.1 Major PR

Merged 3 months ago 3 comments

build(deps): bump laravel/framework from 11.45.2 to 12.28.1

antoinelema/laravel-react-boilerplate #22

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 1 comment

Bump the production-dependencies group across 1 directory with 2 updates

christinaprado/laravel-docker #8

11.44.7 → 12.28.1 Major PR

Open 3 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.28.1

simonebogni/portfolio #168

11.44.2 → 12.28.1 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.28.1

laravelio/paste.laravel.io #367

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 1 comment

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.28.1

GingertronMk1/stickee #231

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 3 comments

Bump laravel/framework from 11.45.2 to 12.28.1

laracord/laracord.com #186

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.45.2 to 12.28.1

Arham1243/laravel-11-api-project-starter #10

11.45.2 → 12.28.1 Major PR

Closed 3 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.28.1 in /backend

zuyd-projects/cyber-scope #175

11.44.2 → 12.28.1 Major PR

Open 3 months ago

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.28.0

GingertronMk1/stickee #230

11.45.2 → 12.28.0 Major PR

Closed 3 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.28.0

laracord/laracord.com #184

11.45.2 → 12.28.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.28.0

Arham1243/laravel-11-api-project-starter #9

11.45.2 → 12.28.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.44.2 to 12.27.1

simonebogni/portfolio #165

11.44.2 → 12.27.1 Major PR

Closed 3 months ago 2 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.27.1 in /backend

zuyd-projects/cyber-scope #174

11.44.2 → 12.27.1 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.27.0

laracord/laracord.com #183

11.45.2 → 12.27.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.27.0

Arham1243/laravel-11-api-project-starter #7

11.45.2 → 12.27.0 Major PR

Closed 3 months ago 1 comment

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.27.0

GingertronMk1/stickee #227

11.45.2 → 12.27.0 Major PR

Closed 3 months ago 2 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.27.0 in /backend

zuyd-projects/cyber-scope #171

11.44.2 → 12.27.0 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.26.4

simonebogni/portfolio #161

11.44.2 → 12.26.4 Major PR

Open 3 months ago

chore(deps): bump laravel/framework from 11.45.2 to 12.26.4 in /backend

lomendor/Project-Dixis #81

11.45.2 → 12.26.4 Major PR

Open 3 months ago 6 comments

Bump laravel/framework from 11.45.1 to 12.26.4

pcb2k18/ghanainsider-de #9

11.45.1 → 12.26.4 Major PR

Closed 3 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.26.4 in /core

rockerBoy/truckdriver-app #210

11.45.2 → 12.26.4 Major PR

Open 3 months ago

build(deps): bump laravel/framework from 11.45.2 to 12.26.4

antoinelema/laravel-react-boilerplate #18

11.45.2 → 12.26.4 Major PR

Closed 3 months ago 1 comment

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.26.4

GingertronMk1/stickee #225

11.45.2 → 12.26.4 Major PR

Closed 3 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.26.4

laracord/laracord.com #181

11.45.2 → 12.26.4 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.26.4

Arham1243/laravel-11-api-project-starter #6

11.45.2 → 12.26.4 Major PR

Closed 3 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.26.4 in /backend

zuyd-projects/cyber-scope #169

11.44.2 → 12.26.4 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.45.2 to 12.26.3

laravelio/paste.laravel.io #364

11.45.2 → 12.26.3 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.26.3

Arham1243/laravel-11-api-project-starter #5

11.45.2 → 12.26.3 Major PR

Closed 3 months ago 1 comment

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.26.3

GingertronMk1/stickee #222

11.45.2 → 12.26.3 Major PR

Closed 3 months ago 3 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.26.3 in /backend

zuyd-projects/cyber-scope #168

11.44.2 → 12.26.3 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.26.3

simonebogni/portfolio #160

11.44.2 → 12.26.3 Major PR

Closed 3 months ago 2 comments

Bump laravel/framework from 11.45.2 to 12.26.2

laracord/laracord.com #178

11.45.2 → 12.26.2 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.45.2 to 12.26.2

Arham1243/laravel-11-api-project-starter #4

11.45.2 → 12.26.2 Major PR

Closed 3 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.26.1 in /backend

zuyd-projects/cyber-scope #166

11.44.2 → 12.26.1 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.26.0

simonebogni/portfolio #157

11.44.2 → 12.26.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.25.0

Arham1243/laravel-11-api-project-starter #1

11.45.2 → 12.25.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.25.0

laracord/laracord.com #175

11.45.2 → 12.25.0 Major PR

Closed 3 months ago 1 comment

Bump laravel/framework from 11.45.2 to 12.25.0

a1383n/secure-proxy #307

11.45.2 → 12.25.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.25.0 in /core

rockerBoy/truckdriver-app #206

11.45.2 → 12.25.0 Major PR

Open 3 months ago

Bump the production-dependencies group with 2 updates

maw95/laravel-recruitment-task-2 #9

11.44.2 → 12.25.0 Major PR

Open 3 months ago

Bump laravel/framework from 11.45.2 to 12.25.0

laravelio/paste.laravel.io #358

11.45.2 → 12.25.0 Major PR

Closed 3 months ago 1 comment

build(deps): Bump laravel/framework from 11.44.0 to 12.25.0

antoinelema/laravel-react-boilerplate #9

11.44.0 → 12.25.0 Major PR

Closed 3 months ago 1 comment

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.2 to 12.25.0

GingertronMk1/stickee #214

11.45.2 → 12.25.0 Major PR

Open 3 months ago 2 comments

Bump laravel/framework from 11.44.2 to 12.25.0

simonebogni/portfolio #154

11.44.2 → 12.25.0 Major PR

Open 3 months ago 2 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.25.0 in /backend

zuyd-projects/cyber-scope #159

11.44.2 → 12.25.0 Major PR

Closed 3 months ago 1 comment

Package Details

Name:	`laravel/framework`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/laravel/framework`
JSON API:	View JSON

Security Advisories

23

Active advisories

CRITICAL 2

HIGH 10

MODERATE 11

View All composer Advisories

Package Information

Description:

The Laravel Framework.

Repository:	https://github.com/laravel/framework
Homepage:	https://laravel.com
Latest Release:	`v11.37.0` 11 months ago
Dependent Repos:	474,622
Dependent Packages:	15,019
Downloads:	386,299,106
Ranking:	Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs

PR Status

Open 1,321 (37.3%)

Merged 615 (17.4%)

Closed 1,278 (36.1%)

PR Types

Minor 2,748 (77.7%)

Major 248 (7.0%)

Patch 215 (6.1%)