Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

laravel/framework

Ecosystem:
packagist
Package URL:
pkg:composer/laravel/framework
Total PRs:
3,561 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
663 repositories
Unique Repos (30 days):
73 repositories
Security Advisories
Laravel Guard bypass in Eloquent models
GHSA-44pg-c29v-hp6r MODERATE published over 1 year ago • updated 6 days ago
In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: ``` $model-...
Laravel Sensitive Data Exposure
GHSA-c2v7-j5gq-wcq4 CVE-2017-14775 MODERATE published over 3 years ago • updated 10 days ago
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
Improper Input Validation in Laravel
GHSA-w68r-5p45-5rqp CVE-2020-24941 HIGH published over 4 years ago • updated 10 days ago
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests ...
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database
GHSA-4mg9-vhxq-vm7j HIGH published over 4 years ago • updated 6 days ago
### Impact Those using SQL Server with Laravel and allowing user input to be passed directly to the `limit` and `offset` functions are vulnerable ...
Query Binding Exploitation
GHSA-3p32-j457-pg5x CVE-2021-21263 HIGH published almost 5 years ago • updated about 3 hours ago
### Description Laravel versions <6.20.12, <7.30.3 & <8.22.1 contain a query binding exploitation. If a request is crafted where a field that is ...
View all 23 advisories
Recent PRs (filtered by: Open )
RSS Feed Clear filter
Build(deps): Bump laravel/framework from 12.39.0 to 12.40.2

THM-Health/PILOS #2645

12.39.0 → 12.40.2 Minor PR
Open about 19 hours ago 2 comments
THM-Health
chore(deps):(deps): bump the production-dependencies group with 4 updates

Felondz/controlApp #78

12.39.0 → 12.40.2 Minor PR
Open about 21 hours ago 1 comment
Felondz
Bump laravel/framework from 12.23.1 to 12.40.2

Samuel2025-IA/Cursos_Laravel #52

12.23.1 → 12.40.2 Minor PR
Open 1 day ago 1 comment
Samuel2025-IA
Bump laravel/framework from 12.39.0 to 12.40.2

NHSLeadership/assess #27

12.39.0 → 12.40.2 Minor PR
Open 4 days ago 2 comments
NHSLeadership
chore(deps): bump laravel/framework from 12.40.1 to 12.40.2 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #665

12.40.1 → 12.40.2 Patch PR
Open 5 days ago 1 comment
DevSkillsHQ
Bump laravel/framework from 12.40.1 to 12.40.2

Coho04/Ausbildungs-Laravel-Kurs #359

12.40.1 → 12.40.2 Patch PR
Open 5 days ago 1 comment
Coho04
[DEPS][COMPOSER]: Bump laravel/framework from 11.46.2 to 12.40.2

GingertronMk1/stickee #317

11.46.2 → 12.40.2 Major PR
Open 5 days ago 2 comments
GingertronMk1
chore(deps): bump laravel/framework from 12.39.0 to 12.40.1

FrancoStino/zuora-workflows #55

12.39.0 → 12.40.1 Minor PR
Open 6 days ago 1 comment
FrancoStino
chore(deps): bump the laravel group across 1 directory with 10 updates

umaarov/goat-dev #103

12.34.0 → 12.40.1 Minor PR
Open 6 days ago 3 comments
umaarov
[DEPS][COMPOSER]: Bump laravel/framework from 11.46.1 to 12.40.1

GingertronMk1/stickee #315

11.46.1 → 12.40.1 Major PR
Open 6 days ago 2 comments
GingertronMk1
Bump laravel/framework from 12.38.1 to 12.39.0

GuilhermeStracini/POC-GHActions-CI-PHPLaravel #344

12.38.1 → 12.39.0 Minor PR
Open 7 days ago 9 comments
GuilhermeStracini
build(deps): bump laravel/framework from 12.37.0 to 12.39.0

N3XT0R/dashclip-delivery #176

12.37.0 → 12.39.0 Minor PR
Open 7 days ago 3 comments
N3XT0R
chore(deps)(deps): bump laravel/framework from 12.36.1 to 12.39.0

davidecardelli/laravel-starter #30

12.36.1 → 12.39.0 Minor PR
Open 8 days ago 1 comment
davidecardelli
chore(deps)(deps): bump laravel/framework from 12.20.0 to 12.39.0 in /backend

motowo/md_blog #124

12.20.0 → 12.39.0 Minor PR
Open 8 days ago 1 comment
motowo
build(deps): bump the dependencies group in /backend with 4 updates

jnicrimi/laravel-playground #202

12.38.1 → 12.39.0 Minor PR
Open 10 days ago 1 comment
jnicrimi
[DEPS][COMPOSER]: Bump laravel/framework from 11.46.1 to 12.38.1

GingertronMk1/stickee #302

11.46.1 → 12.38.1 Major PR
Open 14 days ago 2 comments
GingertronMk1
Bump laravel/framework from 12.37.0 to 12.38.1

adityakdevin/budgetgen #152

12.37.0 → 12.38.1 Minor PR
Open 14 days ago 1 comment
adityakdevin
Bump laravel/framework from 12.30.1 to 12.38.1

Shaz3e/Laravel-Dev-Kit #173

12.30.1 → 12.38.1 Minor PR
Open 14 days ago 1 comment
Shaz3e
chore(deps)(deps): bump laravel/framework from 12.35.1 to 12.38.1

MarketingLimited/cmis.marketing.limited #44

12.35.1 → 12.38.1 Minor PR
Open 17 days ago 2 comments
MarketingLimited
Bump the composer group with 6 updates

SlimSoftware/sUpdater-Server #238

12.17.0 → 12.38.1 Minor PR
Open 19 days ago 1 comment
SlimSoftware
chore(deps): bump laravel/framework from 12.37.0 to 12.38.1

SecPal/api #155

12.37.0 → 12.38.1 Minor PR
Open 19 days ago 7 comments
SecPal
chore(deps): bump laravel/framework from 12.37.0 to 12.38.1 in /app-backend

DevSkillsHQ/fullstack-boilerplate-php-react-nextjs #646

12.37.0 → 12.38.1 Minor PR
Open 19 days ago 2 comments
DevSkillsHQ
Bump the composer group across 1 directory with 3 updates

aran964230/opensource-casino-v10 #8

11.38.2 → 11.44.1 Minor PR
Open 19 days ago 1 comment
aran964230
chore(deps): bump the production-dependencies group with 2 updates

LycheeOrg/Lychee #3792

12.36.1 → 12.37.0 Minor PR
Open 21 days ago 1 comment
LycheeOrg
chore(deps)(deps): bump laravel/framework from 12.35.1 to 12.37.0

stefanochermazts/CorpVitals24 #13

12.35.1 → 12.37.0 Minor PR
Open 22 days ago 1 comment
stefanochermazts
Bump laravel/framework from 12.12.0 to 12.37.0 in the production-dependencies group

Phong091/php_demo_v1 #1

12.12.0 → 12.37.0 Minor PR
Open 26 days ago 1 comment
Phong091
Bump laravel/framework from 12.35.1 to 12.37.0

joinloops/loops-server #78

12.35.1 → 12.37.0 Minor PR
Open 27 days ago 1 comment
joinloops
Bump laravel/framework from 12.30.1 to 12.36.1

Shaz3e/Laravel-Dev-Kit #168

12.30.1 → 12.36.1 Minor PR
Open 28 days ago 2 comments
Shaz3e
chore(deps): bump laravel/framework from 12.34.0 to 12.36.1

ivoamaral/typing-challenge #24

12.34.0 → 12.36.1 Minor PR
Open 28 days ago 1 comment
ivoamaral
Build(deps): Bump laravel/framework from 12.36.0 to 12.36.1

THM-Health/PILOS #2579

12.36.0 → 12.36.1 Patch PR
Open 29 days ago 1 comment
THM-Health
chore(deps-dev): bump laravel/framework from 12.20.0 to 12.36.1

druidweb/coming-soon #26

12.20.0 → 12.36.1 Minor PR
Open 29 days ago 2 comments
druidweb
Bump laravel/framework from 12.30.1 to 12.36.1

Shaz3e/s3-new-dashboard #104

12.30.1 → 12.36.1 Minor PR
Open about 1 month ago 1 comment
Shaz3e
Bump laravel/framework from 11.45.1 to 12.36.1

superdav42/do-test #16

11.45.1 → 12.36.1 Major PR
Open about 1 month ago 1 comment
superdav42
chore(deps): bump the laravel group across 1 directory with 4 updates

umaarov/goat-dev #82

12.34.0 → 12.36.0 Minor PR
Open about 1 month ago 4 comments
umaarov
Bump laravel/framework from 12.16.0 to 12.36.0

15g-lucas/cesizen-api #55

12.16.0 → 12.36.0 Minor PR
Open about 1 month ago 1 comment
15g-lucas
Bump laravel/framework from 12.34.0 to 12.36.0

su3-hokkaido/sample-laravel-sail #73

12.34.0 → 12.36.0 Minor PR
Open about 1 month ago 1 comment
su3-hokkaido
Build(deps): Bump laravel/framework from 12.35.1 to 12.36.0

THM-Health/PILOS #2573

12.35.1 → 12.36.0 Minor PR
Open about 1 month ago 1 comment
THM-Health
chore(deps): bump the laravel group across 1 directory with 2 updates

umaarov/goat-dev #80

12.34.0 → 12.35.1 Minor PR
Open about 1 month ago 4 comments
umaarov
Bump laravel/framework from 12.16.0 to 12.35.1 in /backend

jdu211171/jdutosho #126

12.16.0 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
jdu211171
build(deps): bump laravel/framework from 12.28.1 to 12.35.1

bbommarito/XPTrackr #43

12.28.1 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
bbommarito
Bump laravel/framework from 12.25.0 to 12.35.1 in /backend

iliayg/Event-X #71

12.25.0 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
iliayg
chore(deps)(deps): bump laravel/framework from 12.20.0 to 12.35.1 in /backend

motowo/md_blog #118

12.20.0 → 12.35.1 Minor PR
Open about 1 month ago 2 comments
motowo
php: bump laravel/framework from 12.34.0 to 12.35.1 in /zoo-php-laravel

intelligent002/micro-service-zoo #729

12.34.0 → 12.35.1 Minor PR
Open about 1 month ago 2 comments
intelligent002
Build(deps): Bump laravel/framework from 12.34.0 to 12.35.1

THM-Health/PILOS #2568

12.34.0 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
THM-Health
chore(deps): bump laravel/framework from 12.34.0 to 12.35.1

yoshii-uxv/franken-laravel #33

12.34.0 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
yoshii-uxv
chore(deps): bump laravel/framework from 12.35.0 to 12.35.1

zenphporg/foundation-site #72

12.35.0 → 12.35.1 Patch PR
Open about 1 month ago 1 comment
zenphporg
Bump laravel/framework from 12.32.5 to 12.35.1

crimsonstrife/forge #445

12.32.5 → 12.35.1 Minor PR
Open about 1 month ago 2 comments
crimsonstrife
build(deps): bump laravel/framework from 12.34.0 to 12.35.1 in /backend in the dependencies group

jnicrimi/laravel-playground #196

12.34.0 → 12.35.1 Minor PR
Open about 1 month ago 1 comment
jnicrimi
Bump laravel/framework from 11.44.2 to 12.35.1

simonebogni/portfolio #217

11.44.2 → 12.35.1 Major PR
Open about 1 month ago 1 comment
simonebogni
Bump laravel/framework from 11.45.1 to 12.35.1

superdav42/do-test #14

11.45.1 → 12.35.1 Major PR
Open about 1 month ago 1 comment
superdav42
Package Details
Name: laravel/framework
Ecosystem: packagist
PURL Type: composer
Package URL: pkg:composer/laravel/framework
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 2
HIGH 10
MODERATE 11
View All composer Advisories
Package Information
Description:

The Laravel Framework.

Repository: https://github.com/laravel/framework
Homepage: https://laravel.com
Latest Release: v11.37.0
11 months ago
Dependent Repos: 474,622
Dependent Packages: 15,019
Downloads: 386,299,106
Ranking: Top 0.0098% by dependent repos Top 0.0208% by downloads Top 0.002% by dependent pkgs
PR Status
Open 1,326 (37.3%)
Merged 615 (17.3%)
Closed 1,287 (36.2%)
PR Types
Minor 2,758 (77.7%)
Major 250 (7.0%)
Patch 217 (6.1%)