Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,548 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
657 repositories
Unique Repos (30 days):
68 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 4 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 7 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 7 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 7 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 4 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
build(deps): bump laravel/framework from 12.17.0 to 12.22.1

florenciajasinski/TasksNotifications #17

12.17.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
florenciajasinski
Bump laravel/framework from 12.20.0 to 12.22.1

apxcde/wirekit #26

12.20.0 → 12.22.1 Minor PR
Open 4 months ago
apxcde
Bump laravel/framework from 12.21.0 to 12.22.1

Verdanix/QuickieUtils #5

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
Verdanix
Bump laravel/framework from 12.21.0 to 12.22.1

liberu-accounting/accounting-laravel #598

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
liberu-accounting
Bump laravel/framework from 12.20.0 to 12.22.1

Steven-Juan/pemrograman-web-perpustakaan-profile #16

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
Steven-Juan
deps: bump laravel/framework from 12.14.0 to 12.22.1

psswid/Flagship-AI #16

12.14.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
psswid
Build(deps): bump laravel/framework from 12.21.0 to 12.22.1

alpha-techs/warehouse-be #32

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
alpha-techs
Composer(deps): bump laravel/framework from 12.21.0 to 12.22.1

torrentpier/torrentpier #2079

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
torrentpier
Bump laravel/framework from 12.21.0 to 12.22.1 in the production-dependencies group

sentoricky/swtest230725 #2

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
sentoricky
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1

umaarov/goat-dev #27

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
umaarov
Bump laravel/framework from 12.3.0 to 12.22.1

sebastiaanspeck/matchy #158

12.3.0 → 12.22.1 Minor PR
Open 4 months ago
sebastiaanspeck
build(deps): bump laravel/framework from 12.3.0 to 12.22.1 in /backend

JourneyPlanner/JourneyPlanner #860

12.3.0 → 12.22.1 Minor PR
Open 4 months ago 2 comments
JourneyPlanner
Build(deps): Bump laravel/framework from 12.21.0 to 12.22.1

THM-Health/PILOS #2382

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 3 comments
THM-Health
Bump laravel/framework from 12.21.0 to 12.22.1

juniorfontenele/laravel-base-template #40

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
juniorfontenele
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

Rans7777/panel #304

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
Rans7777
Bump the minor-updates group with 2 updates

codebar-ag/time.codebar.ch #46

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 1 comment
codebar-ag
chore(deps-dev): bump laravel/framework from 12.20.0 to 12.22.1

druidweb/coming-soon #4

12.20.0 → 12.22.1 Minor PR
Open 4 months ago 2 comments
druidweb
Bump laravel/framework from 12.21.0 to 12.22.1 in the production-dependencies group

peypey9000/softwaretesting_23juli2025 #3

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
peypey9000
Bump laravel/framework from 12.21.0 to 12.22.1

liberu-genealogy/genealogy-laravel #1249

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
liberu-genealogy
Bump laravel/framework from 12.22.0 to 12.22.1

Coho04/Ausbildungs-Laravel-Kurs #293

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
Coho04
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1

andriawan/laravel-best-practice #23

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
andriawan
Bump laravel/framework from 12.22.0 to 12.22.1

madewithlove/semver #1045

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
madewithlove
chore(deps): bump laravel/framework from 12.22.0 to 12.22.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #529

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
DevSkillsHQ
Bump laravel/framework from 12.3.0 to 12.22.1

pozys/smart-link-redirector #71

12.3.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
pozys
Bump laravel/framework from 12.21.0 to 12.22.1

cultuurnet/publiq-platform #1950

12.21.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
cultuurnet
chore(deps): bump laravel/framework from 12.16.0 to 12.22.1

phuyalsandeep10/laravel-db-project #39

12.16.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
phuyalsandeep10
build(deps): bump laravel/framework from 12.14.1 to 12.22.1

jaksws/jak-travel-sys #137

12.14.1 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
jaksws
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1

oliverearl/denken #32

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
oliverearl
Bump laravel/framework from 12.10.2 to 12.22.1

johnlloydserrano/johnlloydserrano.com #132

12.10.2 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
johnlloydserrano
chore(deps): bump laravel/framework from 12.21.0 to 12.22.1

JoeyMckenzie/specsense #198

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago 1 comment
JoeyMckenzie
chore(deps): bump laravel/framework from 12.1.0 to 12.22.1

jiannei/laravel-api-starter #519

12.1.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
jiannei
chore(deps): bump laravel/framework from 12.20.0 to 12.22.1

zenphporg/foundation-site #17

12.20.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
zenphporg
Bump laravel/framework from 12.21.0 to 12.22.1 in the production-dependencies group

ahmadnurfauzy/software-testing #3

12.21.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
ahmadnurfauzy
Bump laravel/framework from 12.20.0 to 12.22.1

Light-it-labs/laravel #304

12.20.0 → 12.22.1 Minor PR
Closed 4 months ago 1 comment
Light-it-labs
chore(deps): bump laravel/framework from 12.3.0 to 12.22.1

nickwelsh/laravel-12-inertia-react-starter #103

12.3.0 → 12.22.1 Minor PR
Open 4 months ago
nickwelsh
build(deps): bump the all group with 4 updates

TegarAditya/madyotomo #183

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
TegarAditya
[DEPS][COMPOSER]: Bump laravel/framework from 12.22.0 to 12.22.1

GingertronMk1/the-integrated-theatre-system #224

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago 2 comments
GingertronMk1
composer: bump the production-deps group across 1 directory with 10 updates

sp-tarkov/forge #269

12.21.0 → 12.22.1 Minor PR
Merged 4 months ago
sp-tarkov
build(deps): bump laravel/framework from 12.19.3 to 12.22.1

istic/wereabouts #17

12.19.3 → 12.22.1 Minor PR
Merged 4 months ago
istic
Bump the composer group across 1 directory with 5 updates

TanNhatCMS/laravel-management-center #1

11.3.1 → 11.44.1 Minor PR
Open 4 months ago
TanNhatCMS
Bump laravel/framework from 12.12.0 to 12.22.1 in the production-dependencies group

drobotoff/google-spreadsheet-sync #1

12.12.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
drobotoff
build(deps): bump laravel/framework from 12.21.0 to 12.22.1 in /backend in the dependencies group

jnicrimi/laravel-playground #168

12.21.0 → 12.22.1 Minor PR
Open 4 months ago
jnicrimi
Bump laravel/framework from 12.16.0 to 12.22.1

15g-lucas/cesizen-api #35

12.16.0 → 12.22.1 Minor PR
Closed 4 months ago 2 comments
15g-lucas
Bump laravel/framework from 12.16.0 to 12.22.1

TanNhatCMS/laravel-telegram-proxy #26

12.16.0 → 12.22.1 Minor PR
Open 4 months ago 1 comment
TanNhatCMS
Bump laravel/framework from 12.22.0 to 12.22.1

Shaz3e/s3-dashboard #104

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
Shaz3e
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

bakaphp/kanvas-ecosystem-api #5284

12.22.0 → 12.22.1 Patch PR
Merged 4 months ago
bakaphp
Bump laravel/framework from 12.22.0 to 12.22.1

aquarion/thalium #1028

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
aquarion
Bump laravel/framework from 11.45.1 to 12.22.1

laravelio/paste.laravel.io #349

11.45.1 → 12.22.1 Major PR
Open 4 months ago
laravelio
build(deps): bump laravel/framework from 12.22.0 to 12.22.1

guanguans/laravel-skeleton #1373

12.22.0 → 12.22.1 Patch PR
Closed 4 months ago 2 comments
guanguans
Bump laravel/framework from 12.22.0 to 12.22.1 in the actions-deps group

rdrgzma/lms #5

12.22.0 → 12.22.1 Patch PR
Open 4 months ago
rdrgzma
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.4%)
Merged 615 (17.3%)
Closed 1,283 (36.2%)
PR Types
Minor 2,753 (77.6%)
Major 250 (7.1%)
Patch 217 (6.1%)