PHP security advisories
Every published advisory for PHP and the frameworks, CMSs and packages built on it, in one place. Updated automatically as projects publish them.
Needs attention
Recent advisories that affect versions still getting security fixes. If you run one, update now.
Nothing needs attention right now.
Reference
Older advisories with settled guidance. That doesn't mean your app is patched: check your version on each tool's page.
-
unrated Laravel ·
Only affects branches that no longer get security fixes
Tools we track
One page per project, with its supported branches, a version check and every advisory.
- PHP Check your PHP version's security fixes PHP versions checker →
- Laravel 2 advisories affect supported versions Plus 9 first-party packages Laravel advisories →
- Symfony 23 advisories affect supported versions Plus 4 first-party packages Symfony advisories →
- Drupal No open advisories Drupal advisories →
- Guzzle No open advisories Guzzle advisories →
- Composer No open advisories Composer advisories →
- Doctrine 1 advisory affects supported versions Doctrine advisories →