Laravel

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68

A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0.

Laravel Live Denmark 2026 Talks Are Now on YouTube

Watch all 17 Laravel Live Denmark 2026 talks on YouTube, including sessions on PHP, Inertia, NativePHP, security, AI, and open source.

Fast Excel 5.x Adds Streaming Imports and Safer Exports

Fast Excel 5.x adds lazy spreadsheet imports, chunk controls, column selection, and formula escaping for current Laravel applications.

Difflock: Lint Laravel Migrations and Diff Your Schema

Difflock is a Laravel package that checks pending migrations for risky changes, records schema baselines, and can block them in CI.

Laravel Scalpel Scans for Filesystem Intrusion Evidence

Laravel Scalpel scans Laravel filesystems for rogue PHP files, obfuscated backdoors, altered directives, environment issues, and file changes.

Artisan Debugging Commands in Laravel Telescope 5.24.0

Laravel Telescope 5.24.0 adds two Artisan commands for inspecting recorded entries from the terminal and cancels stale dashboard requests during navig...

Laravel Image Responses: Serve Resized Images From Routes

Laravel 13.25 lets you return an Image straight from a route. Build on-the-fly resize endpoints with fromStream, toFormat, and cache headers.

Pause All Laravel Queues During a Deploy

Laravel 13.25 adds queue:pause --all and Queue::pauseAll() to stop job processing on every connection without putting the app in maintenance mode.

Laravel Terminal UI for the artisan dev Command

Laravel 13.25 runs artisan dev through @laravel/multiplex, putting each process in its own tab with search, per-process restart, and timestamps.

Partners

View all →

Acquaint Softtech offers AI-ready Laravel developers who onboard in 48 hours at $3000/Month with no lengthy sales process and a 100 percent money-back guarantee.

The go-to PHP IDE with extensive out-of-the-box support for Laravel and its ecosystem.

If your Laravel app gives users a site, a storefront, or a workspace, they’ll eventually want their own domain. The name.com API lets them search, register, and connect one without leaving your product. It’s a clean REST API, so Laravel’s HTTP client is all you need.

The next generation time-tracking and billing software that helps your agency plan and forecast a profitable future.

Providing innovation and stability to ensure your web application succeeds.

Running an old Laravel version? Instant, automated Laravel upgrades and code modernization to keep your applications fresh.

Laravel News

Laravel

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68

Laravel Live Denmark 2026 Talks Are Now on YouTube

Fast Excel 5.x Adds Streaming Imports and Safer Exports

Difflock: Lint Laravel Migrations and Diff Your Schema

Laravel Scalpel Scans for Filesystem Intrusion Evidence

Artisan Debugging Commands in Laravel Telescope 5.24.0

Laravel Image Responses: Serve Resized Images From Routes

Pause All Laravel Queues During a Deploy

Laravel Terminal UI for the artisan dev Command

Partners

Acquaint Softtech

PhpStorm

Let your users buy domains without leaving your app

Harpoon: Next generation time tracking and invoicing

Kirschbaum

Shift