Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,530 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
652 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated about 3 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 4 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 4 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated about 12 hours ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
chore(deps): bump laravel/framework from 12.26.0 to 12.26.2

steven-streller/master-laravel #54

12.26.0 → 12.26.2 Patch PR
Merged 3 months ago
steven-streller
build(deps): bump laravel/framework from 12.26.0 to 12.26.2

bigpixelrocket/laravel-omakase #114

12.26.0 → 12.26.2 Patch PR
Merged 3 months ago 1 comment
bigpixelrocket
chore(deps): bump laravel/framework from 12.26.1 to 12.26.3 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #522

12.26.1 → 12.26.3 Patch PR
Open 3 months ago 1 comment
DevSkillsHQ
chore(deps): bump laravel/framework from 12.26.0 to 12.26.2

ntjapps/base-app #908

12.26.0 → 12.26.2 Patch PR
Open 3 months ago 1 comment
ntjapps
chore(deps): bump the minor-and-patch group with 2 updates

timkley/blockgradient #83

11.45.1 → 11.45.2 Patch PR
Open 3 months ago
timkley
Bump the production-dependencies group with 2 updates

LycheeOrg/Lychee #3628

11.45.1 → 11.45.2 Patch PR
Open 3 months ago
LycheeOrg
build(deps): bump the laravel-pkgs group across 1 directory with 10 updates

rico-vz/HeimerdingerLoL #326

11.45.1 → 11.45.2 Patch PR
Merged 3 months ago
rico-vz
chore(deps): bump laravel/framework from 11.45.1 to 11.45.2 in the minor-and-patch group

timkley/deine-mutter #46

11.45.1 → 11.45.2 Patch PR
Merged 3 months ago
timkley
Bump laravel/framework from 11.45.1 to 11.45.2

ZachWatkins/Rememboard #218

11.45.1 → 11.45.2 Patch PR
Closed 3 months ago 1 comment
ZachWatkins
Bump laravel/framework from 10.48.23 to 10.48.29 in /Laravel_Api

Pericena/swpresupuesto-ia #22

10.48.23 → 10.48.29 Patch PR
Open 3 months ago
Pericena
chore(deps): bump laravel/framework from 12.23.0 to 12.23.1 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #499

12.23.0 → 12.23.1 Patch PR
Closed 3 months ago 2 comments
DevSkillsHQ
Bump laravel/framework from 12.23.0 to 12.23.1

liberu-automation/automation-laravel #354

12.23.0 → 12.23.1 Patch PR
Closed 3 months ago 1 comment
liberu-automation
Bump the composer group across 1 directory with 5 updates

offsoc/librenms #5

10.48.23 → 10.48.29 Patch PR
Open 3 months ago
offsoc
chore(deps): bump laravel/framework from 12.22.0 to 12.22.1

kolaente/futter.rocks #86

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
kolaente
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

Rans7777/panel #304

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
Rans7777
Bump the minor-updates group with 2 updates

codebar-ag/time.codebar.ch #46

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 1 comment
codebar-ag
Bump laravel/framework from 12.22.0 to 12.22.1

Coho04/Ausbildungs-Laravel-Kurs #293

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
Coho04
Bump laravel/framework from 12.22.0 to 12.22.1

madewithlove/semver #1045

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
madewithlove
chore(deps): bump laravel/framework from 12.22.0 to 12.22.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #529

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
DevSkillsHQ
[DEPS][COMPOSER]: Bump laravel/framework from 12.22.0 to 12.22.1

GingertronMk1/the-integrated-theatre-system #224

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago 2 comments
GingertronMk1
Bump laravel/framework from 12.22.0 to 12.22.1

Shaz3e/s3-dashboard #104

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
Shaz3e
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

bakaphp/kanvas-ecosystem-api #5284

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
bakaphp
Bump laravel/framework from 12.22.0 to 12.22.1

aquarion/thalium #1028

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
aquarion
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

guanguans/laravel-skeleton #1373

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
guanguans
Bump laravel/framework from 12.22.0 to 12.22.1 in the actions-deps group

rdrgzma/lms #5

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
rdrgzma
Bump laravel/framework from 12.22.0 to 12.22.1

DiligentCreators/DC-Dashboard-Backend #94

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
DiligentCreators
build(deps): bump laravel/framework from 12.22.0 to 12.22.1 in the actions-deps group

jeffersongoncalves/filament-project-manager #11

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
jeffersongoncalves
Bump the composer group with 4 updates

Joeri-Abbo/laravel-package-boilerplate #492

10.48.12 → 10.48.29 Patch PR
Open 4 months ago
Joeri-Abbo
Bump laravel/framework from 10.48.23 to 10.48.29

OmarTaherSaad/OTS #89

10.48.23 → 10.48.29 Patch PR
Merged 4 months ago
OmarTaherSaad
Bump laravel/framework from 10.48.16 to 10.48.29

muhammadyunus1072/exam_generation #5

10.48.16 → 10.48.29 Patch PR
Closed 4 months ago 1 comment
muhammadyunus1072
Bump the composer group across 1 directory with 6 updates

Joeri-Abbo/dashboard.spatie.be #25

10.48.22 → 10.48.29 Patch PR
Merged 4 months ago
Joeri-Abbo
Bump the composer group across 1 directory with 6 updates

Joeri-Abbo/laravel-medialibrary-pro-app #26

10.48.22 → 10.48.29 Patch PR
Merged 4 months ago
Joeri-Abbo
chore(deps): bump laravel/framework from 10.48.23 to 10.48.29 in /laravel/laravel-php-reporting

gettilled/tilled-example-monorepo #223

10.48.23 → 10.48.29 Patch PR
Merged 4 months ago
gettilled
Bump laravel/framework from 11.44.0 to 11.44.1

Iman874/Project-Laravel-Sistem-Sensus-Harian-RS #2

11.44.0 → 11.44.1 Patch PR
Open 5 months ago
Iman874
Bump laravel/framework from 10.48.23 to 10.48.29

kivikangur-tthk/TARpe21-Laravel #3

10.48.23 → 10.48.29 Patch PR
Merged 5 months ago
kivikangur-tthk
chore(deps): bump laravel/framework from 12.19.0 to 12.19.3

druidweb/druid #11

12.19.0 → 12.19.3 Patch PR
Open 5 months ago
druidweb
chore(deps): bump laravel/framework from 12.19.2 to 12.19.3

dfo-osdt/osp #1072

12.19.2 → 12.19.3 Patch PR
Open 5 months ago
dfo-osdt
composer: bump the production-deps group with 3 updates

sp-tarkov/forge #241

12.19.0 → 12.19.3 Patch PR
Open 5 months ago
sp-tarkov
Bump laravel/framework from 12.19.2 to 12.19.3

codebysushil/Laravel-12 #1

12.19.2 → 12.19.3 Patch PR
Merged 5 months ago
codebysushil
chore(deps): bump laravel/framework from 12.19.2 to 12.19.3 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #467

12.19.2 → 12.19.3 Patch PR
Merged 5 months ago 1 comment
DevSkillsHQ
chore(deps): bump laravel/framework from 12.19.2 to 12.19.3

iBotPeaches/LeafApp_Infinite #1742

12.19.2 → 12.19.3 Patch PR
Open 5 months ago
iBotPeaches
Bump laravel/framework from 12.19.2 to 12.19.3 in /backend

Simounet/flox #140

12.19.2 → 12.19.3 Patch PR
Open 5 months ago
Simounet
build(deps): bump laravel/framework from 12.19.2 to 12.19.3

Rans7777/panel #261

12.19.2 → 12.19.3 Patch PR
Merged 5 months ago
Rans7777
Bump laravel/framework from 12.19.2 to 12.19.3

Coho04/Ausbildungs-Laravel-Kurs #274

12.19.2 → 12.19.3 Patch PR
Open 5 months ago
Coho04
chore(deps): bump laravel/framework from 12.19.2 to 12.19.3 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #465

12.19.2 → 12.19.3 Patch PR
Merged 5 months ago 1 comment
DevSkillsHQ
chore(deps): bump laravel/framework from 12.19.2 to 12.19.3

francoism90/hub #758

12.19.2 → 12.19.3 Patch PR
Closed 5 months ago 1 comment
francoism90
[DEPS][COMPOSER]: Bump laravel/framework from 12.19.2 to 12.19.3

GingertronMk1/the-integrated-theatre-system #158

12.19.2 → 12.19.3 Patch PR
Open 5 months ago
GingertronMk1
Bump laravel/framework from 12.19.0 to 12.19.3

aquarion/thalium #1004

12.19.0 → 12.19.3 Patch PR
Merged 5 months ago
aquarion
Bump laravel/framework from 12.19.0 to 12.19.3

DiligentCreators/DC-Dashboard-Backend #51

12.19.0 → 12.19.3 Patch PR
Open 5 months ago
DiligentCreators
chore(deps): bump laravel/framework from 12.19.0 to 12.19.3 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #450

12.19.0 → 12.19.3 Patch PR
Open 5 months ago 2 comments
DevSkillsHQ
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,319 (37.4%)
Merged 615 (17.4%)
Closed 1,273 (36.1%)
PR Types
Minor 2,741 (77.6%)
Major 248 (7.0%)
Patch 215 (6.1%)