`laravel/framework`

Ecosystem:
packagist

Package URL:
pkg:composer/laravel/framework

Total PRs:
3,537 Dependabot PRs

Latest PR:
about 20 hours ago

Unique Repositories:
654 repositories

Unique Repos (30 days):
75 repositories

Security Advisories

Laravel Guard bypass in Eloquent models

GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 1 day ago

In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...

Query Binding Exploitation

GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated 5 days ago

### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...

Laravel Sensitive Data Exposure

GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 5 days ago

Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.

Improper Input Validation in Laravel

GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 5 days ago

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...

SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database

GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 1 day ago

### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...

View all 23 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

chore(deps): Bump the composer group across 1 directory with 6 updates

denniskrol/yt-dlp-dashboard #23

11.43.2 → 12.17.0 Major PR

Open 6 months ago 2 comments

[DEPS][COMPOSER]: Bump laravel/framework from 11.45.0 to 12.17.0

GingertronMk1/stickee #150

11.45.0 → 12.17.0 Major PR

Closed 6 months ago 3 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.17.0 in /backend

zuyd-projects/cyber-scope #80

11.44.2 → 12.17.0 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.17.0

simonebogni/portfolio #105

11.44.2 → 12.17.0 Major PR

Open 6 months ago 1 comment

Bump laravel/framework from 11.45.0 to 12.16.0

a1383n/secure-proxy #259

11.45.0 → 12.16.0 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.16.0 in /core

rockerBoy/truckdriver-app #174

11.44.7 → 12.16.0 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.16.0

larajournal/larajournal #437

11.44.7 → 12.16.0 Major PR

Closed 6 months ago 2 comments

Bump laravel/framework from 11.44.2 to 12.16.0

simonebogni/portfolio #99

11.44.2 → 12.16.0 Major PR

Open 6 months ago

Bump laravel/framework from 11.45.0 to 12.16.0

Tschucki/pr0verter #166

11.45.0 → 12.16.0 Major PR

Open 6 months ago

[DEPS][COMPOSER]: Bump laravel/framework from 11.44.7 to 12.16.0

GingertronMk1/stickee #145

11.44.7 → 12.16.0 Major PR

Open 6 months ago 2 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.16.0 in /backend

zuyd-projects/cyber-scope #74

11.44.2 → 12.16.0 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.15.0

a1383n/secure-proxy #255

11.44.7 → 12.15.0 Major PR

Open 6 months ago

Bump laravel/framework from 11.44.7 to 12.15.0 in /core

rockerBoy/truckdriver-app #173

11.44.7 → 12.15.0 Major PR

Open 6 months ago

Bump laravel/framework from 11.44.7 to 12.15.0

Tschucki/pr0verter #154

11.44.7 → 12.15.0 Major PR

Closed 6 months ago

[DEPS][COMPOSER]: Bump laravel/framework from 11.44.7 to 12.15.0

GingertronMk1/stickee #143

11.44.7 → 12.15.0 Major PR

Open 6 months ago

chore(deps): bump laravel/framework from 11.44.2 to 12.15.0 in /backend

zuyd-projects/cyber-scope #70

11.44.2 → 12.15.0 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.15.0

simonebogni/portfolio #97

11.44.2 → 12.15.0 Major PR

Closed 6 months ago 2 comments

Bump laravel/framework from 11.44.7 to 12.14.1

a1383n/secure-proxy #250

11.44.7 → 12.14.1 Major PR

Open 6 months ago

Bump laravel/framework from 11.44.7 to 12.14.1 in /core

rockerBoy/truckdriver-app #170

11.44.7 → 12.14.1 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.14.1

Tschucki/pr0verter #153

11.44.7 → 12.14.1 Major PR

Closed 6 months ago 1 comment

Bump laravel/framework from 11.44.1 to 12.14.1

laravelio/paste.laravel.io #313

11.44.1 → 12.14.1 Major PR

Closed 6 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.14.1 in /backend

zuyd-projects/cyber-scope #64

11.44.2 → 12.14.1 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.14.1

simonebogni/portfolio #94

11.44.2 → 12.14.1 Major PR

Closed 7 months ago 2 comments

[DEPS][COMPOSER]: Bump laravel/framework from 11.44.7 to 12.14.1

GingertronMk1/stickee #137

11.44.7 → 12.14.1 Major PR

Closed 7 months ago 2 comments

chore(deps): bump laravel/framework from 11.44.2 to 12.14.0 in /backend

zuyd-projects/cyber-scope #61

11.44.2 → 12.14.0 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.14.0

simonebogni/portfolio #93

11.44.2 → 12.14.0 Major PR

Open 7 months ago

Bump laravel/framework from 11.44.7 to 12.13.0

a1383n/secure-proxy #247

11.44.7 → 12.13.0 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.13.0 in /core

rockerBoy/truckdriver-app #165

11.44.7 → 12.13.0 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.7 to 12.13.0

SamuelMwangiW/tworra #689

11.44.7 → 12.13.0 Major PR

Open 7 months ago

Bump laravel/framework from 11.44.1 to 12.13.0

laravelio/paste.laravel.io #310

11.44.1 → 12.13.0 Major PR

Closed 7 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.13.0 in /backend

zuyd-projects/cyber-scope #57

11.44.2 → 12.13.0 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.13.0

simonebogni/portfolio #90

11.44.2 → 12.13.0 Major PR

Closed 7 months ago 2 comments

[DEPS][COMPOSER]: Bump laravel/framework from 11.44.7 to 12.13.0

GingertronMk1/stickee #131

11.44.7 → 12.13.0 Major PR

Closed 7 months ago 2 comments

Bump laravel/framework from 11.44.7 to 12.12.0

a1383n/secure-proxy #244

11.44.7 → 12.12.0 Major PR

Closed 7 months ago 1 comment

build(deps): bump laravel/framework from 11.44.2 to 12.12.0

RafaelBlum/retro-community #211

11.44.2 → 12.12.0 Major PR

Merged 7 months ago

Bump laravel/framework from 11.44.7 to 12.12.0

SamuelMwangiW/tworra #678

11.44.7 → 12.12.0 Major PR

Closed 7 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.12.0

simonebogni/portfolio #87

11.44.2 → 12.12.0 Major PR

Closed 7 months ago 2 comments

Bump laravel/framework from 11.44.2 to 12.12.0

Tschucki/pr0verter #144

11.44.2 → 12.12.0 Major PR

Open 7 months ago 1 comment

chore(deps): bump laravel/framework from 11.44.2 to 12.12.0 in /backend

zuyd-projects/cyber-scope #49

11.44.2 → 12.12.0 Major PR

Closed 7 months ago 1 comment

build(deps): bump laravel/framework from 11.44.2 to 12.11.1

code4romania/website-factory #1037

11.44.2 → 12.11.1 Major PR

Merged 7 months ago 1 comment

build(deps): bump the composer-production group across 1 directory with 2 updates

ngsw877/aws-infrastructure #45

11.41.3 → 12.10.2 Major PR

Open 7 months ago 8 comments

Bump laravel/framework from 11.44.2 to 12.10.2 in /core

rockerBoy/truckdriver-app #163

11.44.2 → 12.10.2 Major PR

Closed 7 months ago 1 comment

chore(deps): Bump the composer group across 1 directory with 5 updates

denniskrol/yt-dlp-dashboard #19

11.43.2 → 12.10.2 Major PR

Open 7 months ago 1 comment

Bump laravel/framework from 11.44.2 to 12.8.1 in the production-dependencies group

maw95/laravel-recruitment-task-2 #4

11.44.2 → 12.8.1 Major PR

Open 8 months ago 2 comments

php: bump laravel/framework from 11.41.0 to 12.2.0 in /zoo-php-laravel

intelligent002/micro-service-zoo #507

11.41.0 → 12.2.0 Major PR

Merged 9 months ago 1 comment

Bump laravel/framework from 6.20.45 to 10.48.29

prabhakar267/library-management-system #76

6.20.45 → 10.48.29 Major PR

Merged 9 months ago

Bump laravel/framework from 5.8.32 to 6.20.45

leonplondon/vehicles-controller #9

5.8.32 → 6.20.45 Major PR

Open about 1 year ago 2 comments

Bump laravel/framework from 5.8.38 to 6.20.26

erfantkerfan/olympiad #3

5.8.38 → 6.20.26 Major PR

Closed over 4 years ago 2 comments

Package Details

Name:	`laravel/framework`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/laravel/framework`
JSON API:	View JSON

Security Advisories

23

Active advisories

CRITICAL 2

HIGH 10

MODERATE 11

View All composer Advisories

Package Information

Description:

The Laravel Framework.

Repository:	https://github.com/laravel/framework
Homepage:	https://laravel.com
Latest Release:	`v11.37.0` 11 months ago
Dependent Repos:	474,622
Dependent Packages:	15,019
Downloads:	386,299,106
Ranking:	Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs

PR Status

Open 1,321 (37.4%)

Merged 615 (17.4%)

Closed 1,275 (36.1%)

PR Types

Minor 2,745 (77.7%)

Major 248 (7.0%)

Patch 215 (6.1%)