Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,548 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
657 repositories
Unique Repos (30 days):
68 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 4 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 8 days ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 8 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 8 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 5 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
View all 23 advisories
Recent PRs
RSS Feed
build(deps): bump laravel/framework from 12.17.0 to 12.20.0

florenciajasinski/TasksNotifications #13

12.17.0 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
florenciajasinski
deps: bump laravel/framework from 12.14.0 to 12.20.0

psswid/Flagship-AI #13

12.14.0 → 12.20.0 Minor PR
Open 5 months ago
psswid
build(deps): bump laravel/framework from 12.18.0 to 12.20.0

florenciajasinski/Travel-Agency #15

12.18.0 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
florenciajasinski
Bump laravel/framework from 12.19.3 to 12.20.0 in /backend

anthonybeckett/mixstation #82

12.19.3 → 12.20.0 Minor PR
Open 5 months ago
anthonybeckett
Bump laravel/framework from 12.19.3 to 12.20.0

apxcde/wirekit #15

12.19.3 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
apxcde
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

umaarov/goat-dev #12

12.19.3 → 12.20.0 Minor PR
Open 5 months ago 1 comment
umaarov
Bump laravel/framework from 12.14.1 to 12.20.0 in /backend

stevestylix/S01 #36

12.14.1 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
stevestylix
build(deps): bump laravel/framework from 12.3.0 to 12.20.0 in /backend

JourneyPlanner/JourneyPlanner #810

12.3.0 → 12.20.0 Minor PR
Closed 5 months ago 2 comments
JourneyPlanner
Bump laravel/framework from 12.19.3 to 12.20.0

juniorfontenele/laravel-base-template #26

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago 1 comment
juniorfontenele
Bump laravel/framework from 12.19.3 to 12.20.0

THM-Health/PILOS #2292

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago 2 comments
THM-Health
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

eng-gabrielscardoso/gabrielscardoso #199

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
eng-gabrielscardoso
chore(deps): bump laravel/framework from 12.15.0 to 12.20.0

JoeyMckenzie/joeymckenzie.tech #456

12.15.0 → 12.20.0 Minor PR
Closed 5 months ago 2 comments
JoeyMckenzie
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

oliverearl/denken #18

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
oliverearl
build(deps): bump laravel/framework from 12.14.1 to 12.20.0

jaksws/jak-travel-sys #132

12.14.1 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
jaksws
Bump laravel/framework from 12.3.0 to 12.20.0

pozys/smart-link-redirector #68

12.3.0 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
pozys
Bump laravel/framework from 12.10.2 to 12.20.0

johnlloydserrano/johnlloydserrano.com #119

12.10.2 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
johnlloydserrano
chore(deps): bump laravel/framework from 12.16.0 to 12.20.0

monicahq/monica #7768

12.16.0 → 12.20.0 Minor PR
Open 5 months ago 2 comments
monicahq
chore(deps): bump laravel/framework from 12.16.0 to 12.20.0

phuyalsandeep10/laravel-db-project #25

12.16.0 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
phuyalsandeep10
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

JoeyMckenzie/specsense #160

12.19.3 → 12.20.0 Minor PR
Open 5 months ago 1 comment
JoeyMckenzie
Bump laravel/framework from 12.19.3 to 12.20.0

cultuurnet/publiq-platform #1894

12.19.3 → 12.20.0 Minor PR
Open 5 months ago
cultuurnet
Bump laravel/framework from 12.19.3 to 12.20.0

SamuelMwangiW/tworra #730

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
SamuelMwangiW
build(deps): bump the all group with 7 updates

TegarAditya/madyotomo #176

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
TegarAditya
Bump laravel/framework from 12.18.0 to 12.20.0 in /backend

iliayg/Event-X #6

12.18.0 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
iliayg
build(deps): bump the dependencies group in /backend with 4 updates

jnicrimi/laravel-playground #165

12.19.3 → 12.20.0 Minor PR
Open 5 months ago 1 comment
jnicrimi
Bump the laravel group across 1 directory with 3 updates

foxcoverts/climbing-team #440

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
foxcoverts
Bump laravel/framework from 12.17.0 to 12.20.0

askuri/ultimania-server #21

12.17.0 → 12.20.0 Minor PR
Merged 5 months ago
askuri
Bump laravel/framework from 11.45.1 to 12.20.0

laravelio/paste.laravel.io #335

11.45.1 → 12.20.0 Major PR
Closed 5 months ago 1 comment
laravelio
build(deps): bump laravel/framework from 12.13.0 to 12.20.0

Zac-Zajdel/vibe-log #98

12.13.0 → 12.20.0 Minor PR
Closed 5 months ago 2 comments
Zac-Zajdel
Bump the composer group across 1 directory with 6 updates

foxviewr/email-orders #9

11.19.0 → 11.44.1 Minor PR
Open 5 months ago
foxviewr
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

andriawan/laravel-best-practice #12

12.19.3 → 12.20.0 Minor PR
Open 5 months ago 1 comment
andriawan
Bump laravel/framework from 12.0.1 to 12.1.1

AlysonTrizotto/swoole #2

12.0.1 → 12.1.1 Minor PR
Open 5 months ago
AlysonTrizotto
Bump the composer group across 1 directory with 5 updates

gabrielnalmeida/book-review #1

11.7.0 → 11.44.1 Minor PR
Merged 5 months ago
gabrielnalmeida
build(deps): bump the composer group across 1 directory with 5 updates

gabrielnalmeida/task-list #1

10.46.0 → 10.48.29 Minor PR
Open 5 months ago
gabrielnalmeida
Bump laravel/framework from 11.44.0 to 11.44.1

Iman874/Project-Laravel-Sistem-Sensus-Harian-RS #2

11.44.0 → 11.44.1 Patch PR
Open 5 months ago
Iman874
Bump laravel/framework from 12.16.0 to 12.20.0

TanNhatCMS/laravel-telegram-proxy #17

12.16.0 → 12.20.0 Minor PR
Closed 5 months ago 2 comments
TanNhatCMS
Bump laravel/framework from 12.16.0 to 12.20.0

15g-lucas/cesizen-api #29

12.16.0 → 12.20.0 Minor PR
Open 5 months ago
15g-lucas
Bump the dependencies group with 6 updates

sertxudeveloper/sertxu.dev #228

12.19.3 → 12.20.0 Minor PR
Open 5 months ago
sertxudeveloper
Bump laravel/framework from 12.19.3 to 12.20.0

EncoreDigitalGroup/laravel-cache-prune #30

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
EncoreDigitalGroup
build(deps): bump laravel/framework from 12.19.3 to 12.20.0

bigpixelrocket/laravel-omakase #82

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
bigpixelrocket
chore(deps): Bump laravel/framework from 12.19.3 to 12.20.0 in /src

moeyashi/template-laravel-on-vscode-remote-container #194

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago 1 comment
moeyashi
Bump the production-dependencies group across 1 directory with 4 updates

riasvdv/rias.be #698

12.19.3 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
riasvdv
⬆️ deps(php)(deps): Bump laravel/framework from 12.15.0 to 12.20.0

lllluc4s/book-manager-vue3 #22

12.15.0 → 12.20.0 Minor PR
Open 5 months ago 2 comments
lllluc4s
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-laravel-vue #490

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago 1 comment
DevSkillsHQ
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

iBotPeaches/LeafApp_Infinite #1755

12.19.3 → 12.20.0 Minor PR
Open 5 months ago
iBotPeaches
Bump laravel/framework from 12.10.2 to 12.20.0

SelectandStart/laravel-forum #35

12.10.2 → 12.20.0 Minor PR
Closed 5 months ago 1 comment
SelectandStart
chore(deps): bump laravel/framework from 12.19.3 to 12.20.0

kolaente/futter.rocks #69

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
kolaente
php: bump laravel/framework from 12.19.3 to 12.20.0 in /zoo-php-laravel

intelligent002/micro-service-zoo #557

12.19.3 → 12.20.0 Minor PR
Open 5 months ago
intelligent002
Bump laravel/framework from 12.19.3 to 12.20.0

Tschucki/pr0verter #207

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
Tschucki
Bump laravel/framework from 12.19.3 to 12.20.0

floor9design-ltd/laravel-uuid-model-support #97

12.19.3 → 12.20.0 Minor PR
Merged 5 months ago
floor9design-ltd
Bump laravel/framework from 12.17.0 to 12.20.0

liberu-accounting/accounting-laravel #566

12.17.0 → 12.20.0 Minor PR
Merged 5 months ago
liberu-accounting
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,325 (37.3%)
Merged 615 (17.3%)
Closed 1,285 (36.2%)
PR Types
Minor 2,755 (77.6%)
Major 250 (7.0%)
Patch 217 (6.1%)