Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,547 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
656 repositories
Unique Repos (30 days):
70 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 4 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 7 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 7 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 7 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 4 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
chore(deps): bump laravel/framework from 12.22.1 to 12.23.0 in /app

DevSkillsHQ/backend-boilerplate-php-laravel #498

12.22.1 → 12.23.0 Minor PR
Merged 4 months ago 1 comment
DevSkillsHQ
composer: bump laravel/framework from 12.20.0 to 12.22.1

josephgodwinkimani/lara-nuxt-boilerplate #3

12.20.0 → 12.22.1 Minor PR
Open 4 months ago 2 comments
josephgodwinkimani
Bump laravel/framework from 12.7.2 to 12.22.1 in the production-dependencies group

EndijsOgrins/laravel-docker #13

12.7.2 → 12.22.1 Minor PR
Open 4 months ago 1 comment
EndijsOgrins
Bump laravel/framework from 12.10.2 to 12.22.1 in /backend

jdu211171/jdutosho #102

12.10.2 → 12.22.1 Minor PR
Open 4 months ago 2 comments
jdu211171
Bump the major-updates group with 7 updates

drew-b-dev/solidtime #1

11.32.0 → 11.45.1 Minor PR
Open 4 months ago 2 comments
drew-b-dev
Bump laravel/framework from 12.21.0 to 12.22.1

adityakdevin/budgetgen #64

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
adityakdevin
build(deps): bump laravel/framework from 12.21.0 to 12.22.1

Monamoxie/flash-card #86

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
Monamoxie
build(deps): bump laravel/framework from 12.20.0 to 12.22.1

SecurID/trainercontainer #131

12.20.0 → 12.22.1 Minor PR
Open 4 months ago
SecurID
Bump laravel/framework from 12.21.0 to 12.22.1

Shaz3e/Laravel-Dev-Kit #124

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 2 comments
Shaz3e
Bump laravel/framework from 12.16.0 to 12.22.1

YanMyoAungg/Weekly-TimeTable-Management #18

12.16.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
YanMyoAungg
Bump laravel/framework from 12.14.1 to 12.22.1

pablo-diaz2799/task-notifications #25

12.14.1 → 12.22.1 Minor PR
Open 4 months ago
pablo-diaz2799
Bump laravel/framework from 12.1.1 to 12.22.1

samharvey44/strava-dsw-insights #87

12.1.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
samharvey44
chore(deps): bump laravel/framework from 12.20.0 to 12.22.1

druidweb/druid #33

12.20.0 → 12.22.1 Minor PR
Open 4 months ago
druidweb
Bump the updates group with 2 updates

CelDaemon/larabox #50

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
CelDaemon
chore(deps): bump laravel/framework from 12.12.0 to 12.22.1

asbiin/laravel-webauthn-example #1162

12.12.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
asbiin
chore(deps): bump laravel/framework from 12.20.0 to 12.22.1

kadirzengin215/laravel-starter-kit #3

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
kadirzengin215
Bump laravel/framework from 11.45.1 to 12.22.1

a1383n/secure-proxy #297

11.45.1 → 12.22.1 Major PR
Open 4 months ago
a1383n
Bump laravel/framework from 12.1.1 to 12.22.1

hmayer/my-laravel-boilerplate #82

12.1.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
hmayer
Bump laravel/framework from 12.19.3 to 12.22.1

innocommerce/innoshop #264

12.19.3 → 12.22.1 Minor PR
Open 4 months ago 1 comment
innocommerce
Bump laravel/framework from 12.21.0 to 12.22.1

GuilhermeStracini/POC-GHActions-CI-PHPLaravel #296

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 8 comments
GuilhermeStracini
Bump laravel/framework from 12.14.1 to 12.22.1

Reykiraa/dss-food #31

12.14.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
Reykiraa
Bump laravel/framework from 12.21.0 to 12.22.1 in the production-dependencies group

aristus80/SoftwareTesting #2

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
aristus80
Bump laravel/framework from 12.21.0 to 12.22.1

playsaurus-inc/play-bench #102

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
playsaurus-inc
Bump laravel/framework from 12.21.0 to 12.22.1

NickC404/laravel-notes-app #1

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
NickC404
Bump laravel/framework from 12.3.0 to 12.22.1

luciano-capretti/travel-agency #35

12.3.0 → 12.22.1 Minor PR
Open 4 months ago
luciano-capretti
build(deps): bump laravel/framework from 12.21.0 to 12.22.1

openmultiplechoice/openmultiplechoice #1230

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
openmultiplechoice
Bump laravel/framework from 12.21.0 to 12.22.1 in /backend

HiEventsDev/Hi.Events #703

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
HiEventsDev
Bump laravel/framework from 12.20.0 to 12.22.1

Abdallah01win/StarterApi #49

12.20.0 → 12.22.1 Minor PR
Open 4 months ago 2 comments
Abdallah01win
Bump laravel/framework from 12.19.3 to 12.22.1

smal82/laravel-oxylabs-test #22

12.19.3 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
smal82
⬆️ deps(deps): Bump laravel/framework from 12.15.0 to 12.22.1

lllluc4s/book-manager #20

12.15.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
lllluc4s
chore(deps): bump laravel/framework from 12.18.0 to 12.22.1

clys-man/laravel-api-starter-kit #31

12.18.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
clys-man
Bump laravel/framework from 12.21.0 to 12.22.1

AkibaAT/fvn.li #130

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
AkibaAT
Bump laravel/framework from 12.3.0 to 12.22.1

gbauer-lightit/task-notifications #26

12.3.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
gbauer-lightit
build(deps): bump the minor-and-patch group with 2 updates

timkley/zenith #57

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
timkley
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #520

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.14.1 to 12.22.1

elenay30/SPK-MOORA #12

12.14.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
elenay30
Bump laravel/framework from 12.21.0 to 12.22.1

Vento-Nuenenen/NVentory #125

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
Vento-Nuenenen
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1

tyler36/dependabot-gha #99

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
tyler36
Bump laravel/framework from 12.20.0 to 12.22.1

N3XT0R/laravel-migration-generator #11

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
N3XT0R
Bump laravel/framework from 12.8.1 to 12.22.1

simpson-getting-crazy/personal-finance-tracker #24

12.8.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
simpson-getting-crazy
composer: bump laravel/framework from 12.14.1 to 12.22.1

umanda/saminda #20

12.14.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
umanda
chore(deps)(deps): bump laravel/framework from 12.20.0 to 12.22.1 in /backend

motowo/md_blog #66

12.20.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
motowo
chore(deps): bump laravel/framework from 12.17.0 to 12.22.1

Talpx1/simonecerruti.com #26

12.17.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
Talpx1
chore(deps): bump laravel/framework from 12.22.0 to 12.22.1

kolaente/futter.rocks #86

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
kolaente
Bump laravel/framework from 12.20.0 to 12.22.1

Mavv3006/BlueBirdBigBand #1067

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
Mavv3006
Bump laravel/framework from 12.10.2 to 12.22.1

SelectandStart/laravel-forum #41

12.10.2 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
SelectandStart
Bump laravel/framework from 12.21.0 to 12.22.1

Tschucki/pr0verter #238

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
Tschucki
chore(deps): bump laravel/framework from 12.20.0 to 12.22.1

zenphporg/zenphporg #15

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
zenphporg
php: bump laravel/framework from 12.21.0 to 12.22.1 in /zoo-php-laravel

intelligent002/micro-service-zoo #641

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
intelligent002
Bump laravel/framework from 12.21.0 to 12.22.1

ntoufoudis/LaravelCommerce #13

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
ntoufoudis
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.4%)
Merged 615 (17.3%)
Closed 1,283 (36.2%)
PR Types
Minor 2,753 (77.6%)
Major 250 (7.1%)
Patch 217 (6.1%)