laravel/framework
Ecosystem:
packagist
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,532 Dependabot PRs
3,532 Dependabot PRs
Latest PR:
about 2 hours ago
about 2 hours ago
Unique Repositories:
652 repositories
652 repositories
Unique Repos (30 days):
80 repositories
80 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r
MODERATE
published over 1 year ago
• updated about 6 hours ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name:
```
$model-...
Query Binding Exploitation
GHSA-3p32-j457-pg5x
CVE-2021-21263
HIGH
published almost 5 years ago
• updated 4 days ago
### Description
Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation.
If a request is crafted where a field that is ...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4
CVE-2017-14775
MODERATE
published over 3 years ago
• updated 4 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp
CVE-2020-24941
HIGH
published over 4 years ago
• updated 4 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j
HIGH
published over 4 years ago
• updated about 15 hours ago
### Impact
Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
Recent PRs (filtered by: Patch PRs )
Bump the composer group with 3 updates
Joeri-Abbo/laravel-boilerplate #573
9.52.16 → 9.52.17
Patch PR
Open
11 months ago
2 comments
Bump laravel/framework from 8.83.27 to 8.83.28 in /docker
dexdim/ams #28
8.83.27 → 8.83.28
Patch PR
Merged
about 1 year ago
Bump laravel/framework from 8.83.7 to 8.83.28
8.83.7 → 8.83.28
Patch PR
Closed
about 1 year ago
1 comment
Bump laravel/framework from 6.20.44 to 6.20.45
samdking/5aside #66
6.20.44 → 6.20.45
Patch PR
Merged
about 1 year ago
Bump laravel/framework from 8.83.27 to 8.83.28
Ecodenl/Woningdossier #1814
8.83.27 → 8.83.28
Patch PR
Closed
about 1 year ago
build(deps): bump laravel/framework from 10.48.8 to 10.48.23
koel/koel #1876
10.48.8 → 10.48.23
Patch PR
Closed
about 1 year ago
1 comment
Bump laravel/framework from 8.83.27 to 8.83.28
vcjpierre/laravel-multiseller-ecommerce #73
8.83.27 → 8.83.28
Patch PR
Merged
about 1 year ago
Bump laravel/framework from 10.48.20 to 10.48.23
10.48.20 → 10.48.23
Patch PR
Closed
about 1 year ago
1 comment
build(deps): bump laravel/framework from 10.48.20 to 10.48.23
10.48.20 → 10.48.23
Patch PR
Closed
about 1 year ago
Bump laravel/framework from 7.30.6 to 7.30.7 in /creator
amieiro/disposable-email-domains #27
7.30.6 → 7.30.7
Patch PR
Merged
about 1 year ago
Bump laravel/framework from 5.8.12 to 5.8.38 in /Laravel
5.8.12 → 5.8.38
Patch PR
Closed
almost 4 years ago
1 comment
Bump laravel/framework from 6.20.15 to 6.20.39
6.20.15 → 6.20.39
Patch PR
Open
about 4 years ago
2 comments
[Security] Bump laravel/framework from 6.20.15 to 6.20.26
6.20.15 → 6.20.26
Patch PR
Open
over 4 years ago
2 comments
Package Details
| Name: | laravel/framework |
| Ecosystem: | packagist |
| PURL Type: | composer |
| Package URL: | pkg:composer/laravel/framework |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
The Laravel Framework.
| Repository: | https://github.com/laravel/framework |
| Homepage: | https://laravel.com |
| Latest Release: |
v11.37.0
11 months ago |
| Dependent Repos: | 474,622 |
| Dependent Packages: | 15,019 |
| Downloads: | 386,299,106 |
| Ranking: | Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs |