Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,548 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
657 repositories
Unique Repos (30 days):
68 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 4 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 8 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 8 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 8 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 4 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
Bump laravel/framework from 12.21.0 to 12.22.0

omnicolor/commlink #2487

12.21.0 → 12.22.0 Minor PR
Open 4 months ago
omnicolor
Bump laravel/framework from 12.0.0 to 12.21.0

liberusoftware/boilerplate-laravel #437

12.0.0 → 12.21.0 Minor PR
Merged 4 months ago
liberusoftware
Bump laravel/framework from 11.33.2 to 11.45.1

schantldev/statamic-formattach #3

11.33.2 → 11.45.1 Minor PR
Merged 4 months ago
schantldev
chore(deps): bump laravel/framework from 12.20.0 to 12.21.0

nconklindev/wfm-geo-toolkit #164

12.20.0 → 12.21.0 Minor PR
Open 4 months ago 3 comments
nconklindev
deps: bump laravel/framework from 12.19.3 to 12.21.0 in /backend

yasu-programming/ai-driven-blog #24

12.19.3 → 12.21.0 Minor PR
Open 4 months ago 2 comments
yasu-programming
Bump laravel/framework from 12.18.0 to 12.21.0

Shaz3e/Laravel-Dev-Kit #121

12.18.0 → 12.21.0 Minor PR
Closed 4 months ago 2 comments
Shaz3e
Bump the production-dependencies group across 1 directory with 2 updates

DelphineJozeau/microblogging_back #14

12.12.0 → 12.21.0 Minor PR
Open 4 months ago
DelphineJozeau
chore(deps): bump laravel/framework from 12.20.0 to 12.21.0

druidweb/druid #25

12.20.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
druidweb
Bump laravel/framework from 12.19.3 to 12.21.0

innocommerce/innoshop #258

12.19.3 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
innocommerce
chore(deps): bump laravel/framework from 12.2.0 to 12.21.0

hiroe-crowdbotics/monica #46

12.2.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
hiroe-crowdbotics
Bump laravel/framework from 12.20.0 to 12.21.0

Abdallah01win/StarterApi #45

12.20.0 → 12.21.0 Minor PR
Closed 4 months ago 2 comments
Abdallah01win
chore: bump laravel/framework from 12.19.3 to 12.21.0

devenjahnke/laravel-template #9

12.19.3 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
devenjahnke
composer: bump the production-deps group with 8 updates

sp-tarkov/forge #267

12.20.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
sp-tarkov
chore(deps): bump laravel/framework from 10.32.1 to 10.48.29

NorfolkDev/nordevcon-website #133

10.32.1 → 10.48.29 Minor PR
Open 4 months ago
NorfolkDev
Bump laravel/framework from 12.7.2 to 12.21.0

ZanichelliEditore/sendy #278

12.7.2 → 12.21.0 Minor PR
Open 4 months ago
ZanichelliEditore
composer(deps): bump the laravel group across 1 directory with 3 updates

jochembeetz/bar-menu #13

12.19.3 → 12.21.0 Minor PR
Closed 4 months ago 3 comments
jochembeetz
chore(deps): bump laravel/framework from 12.17.0 to 12.21.0

Talpx1/simonecerruti.com #25

12.17.0 → 12.21.0 Minor PR
Closed 4 months ago 2 comments
Talpx1
build(deps): bump laravel/framework from 12.3.0 to 12.21.0

luciano-capretti/travel-agency-challenge #30

12.3.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
luciano-capretti
composer: bump laravel/framework from 12.14.1 to 12.21.0

umanda/saminda #19

12.14.1 → 12.21.0 Minor PR
Open 4 months ago
umanda
Bump laravel/framework from 12.20.0 to 12.21.0

lanedirt/OGameX #697

12.20.0 → 12.21.0 Minor PR
Merged 4 months ago 1 comment
lanedirt
deps(deps): bump laravel/framework from 12.20.0 to 12.21.0 in /src

ryoooosk/frankenphp-with-inertia-demo #47

12.20.0 → 12.21.0 Minor PR
Merged 4 months ago
ryoooosk
chore(deps): bump laravel/framework from 12.19.3 to 12.21.0 in /back

jobtrek/manager #39

12.19.3 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
jobtrek
Bump the updates group across 1 directory with 3 updates

CelDaemon/larabox #49

12.20.0 → 12.21.0 Minor PR
Merged 4 months ago
CelDaemon
Bump the composer group across 1 directory with 5 updates

MoustaphaFEKOTAN/API-Restful-laravel-projet-biblioth-que #1

11.16.0 → 11.44.1 Minor PR
Open 4 months ago
MoustaphaFEKOTAN
chore(deps): bump laravel/framework from 12.20.0 to 12.21.0

rotex1800/rotex1800.de #237

12.20.0 → 12.21.0 Minor PR
Closed 4 months ago 4 comments
rotex1800
Bump laravel/framework from 12.19.3 to 12.21.0

archlich03/pbpis #82

12.19.3 → 12.21.0 Minor PR
Open 4 months ago
archlich03
chore(deps): bump the production-dependencies group with 2 updates

audunru/dynamic-cors #36

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
chore(deps): bump the php-dependencies group across 1 directory with 3 updates

laravelcm/filament-starter-kit #22

12.20.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
laravelcm
build(deps): bump laravel/framework from 12.8.1 to 12.21.0

muhismail015/laravel-starter #12

12.8.1 → 12.21.0 Minor PR
Open 4 months ago 1 comment
muhismail015
build(deps): bump the dependencies group across 1 directory with 6 updates

prave-com/smpn13-bdl #57

12.16.0 → 12.21.0 Minor PR
Open 4 months ago
prave-com
chore(deps): bump laravel/framework from 12.16.0 to 12.21.0

code4romania/rezultatevot #341

12.16.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
code4romania
chore(deps): bump the production-dependencies group with 2 updates

audunru/version-warning #53

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
chore(deps): bump the production-dependencies group with 2 updates

audunru/export-response #56

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
chore(deps): bump the production-dependencies group with 2 updates

audunru/model-history #52

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
build(deps): bump the production-dependencies group with 2 updates

audunru/monolog-pushover #29

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago 1 comment
audunru
Bump laravel/framework from 11.45.1 to 12.21.0

Naingzwehtut/blogLaravelFirst #7

11.45.1 → 12.21.0 Major PR
Open 4 months ago 2 comments
Naingzwehtut
chore(deps): bump laravel/framework from 12.19.3 to 12.21.0 in the dependencies group

creasico/laravel-nusa #169

12.19.3 → 12.21.0 Minor PR
Open 4 months ago
creasico
Bump laravel/framework from 12.19.3 to 12.21.0

Kitware/CDash #3033

12.19.3 → 12.21.0 Minor PR
Open 4 months ago
Kitware
Bump laravel/framework from 11.45.1 to 12.21.0

gomzyakov/laravel-blog #445

11.45.1 → 12.21.0 Major PR
Closed 4 months ago 1 comment
gomzyakov
chore(deps): bump the production-dependencies group with 2 updates

audunru/memory-usage #53

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
Bump laravel/framework from 12.19.3 to 12.21.0

chieftools/pkgtrends #236

12.19.3 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
chieftools
build(deps): bump laravel/framework from 12.16.0 to 12.21.0

code4romania/website-factory #1102

12.16.0 → 12.21.0 Minor PR
Open 4 months ago
code4romania
build(deps): bump the production-dependencies group with 3 updates

audunru/social-accounts #57

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
Bump laravel/framework from 12.17.0 to 12.21.0

Saukiofficial/ningratisp #7

12.17.0 → 12.21.0 Minor PR
Open 4 months ago
Saukiofficial
Bump laravel/framework from 12.16.0 to 12.21.0

code4romania/colectare-declaratii #23

12.16.0 → 12.21.0 Minor PR
Closed 4 months ago 1 comment
code4romania
Bump the composer group with 8 updates

jrmajor/bajki-muza #136

12.20.0 → 12.21.0 Minor PR
Open 4 months ago 1 comment
jrmajor
build(deps): bump the production-dependencies group with 3 updates

audunru/config-secrets #62

12.19.3 → 12.21.0 Minor PR
Merged 4 months ago
audunru
Bump the dependencies group across 1 directory with 6 updates

kiraware/PinterIn #31

12.16.0 → 12.21.0 Minor PR
Open 4 months ago
kiraware
Bump the composer group with 13 updates

jrmajor/arbor #134

12.17.0 → 12.21.0 Minor PR
Open 4 months ago
jrmajor
Bump laravel/framework from 11.45.1 to 12.21.0

swiss-laravel-association/website #90

11.45.1 → 12.21.0 Major PR
Open 4 months ago 1 comment
swiss-laravel-association
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.4%)
Merged 615 (17.3%)
Closed 1,283 (36.2%)
PR Types
Minor 2,753 (77.6%)
Major 250 (7.1%)
Patch 217 (6.1%)