Security

Critical Token Guard Auth Bypass Fixed in Laravel 13.29 and 12.68

A critical auth bypass in Laravel's token API guard let attackers log in as other users on MySQL and MariaDB. Update to 12.68.0 or 13.29.0.

Laravel AI SDK and Laravel MCP Security Fixes: Update Now

Security advisories for the Laravel AI SDK and Laravel MCP fix an SSRF bug and an OAuth redirect issue. Here are the affected versions and how to upda...

Laravel Auditor Audits Your App With Your Own AI Agent

Laravel Auditor gives Claude Code, Codex, or Cursor a 75-rule audit methodology plus read-only MCP tools for security, performance, and schema checks.

Laravel Security Middleware

Middleware isn't something new we have been using it in our applications for a while now for various usages, from Authentication, to Authorization and...

Partners

View all →

Pushsilver is simple invoicing for freelancers and small studios — send polished invoices, automate reminders, and get paid on time without the bloat.

Acquaint Softtech offers AI-ready Laravel developers who onboard in 48 hours at $3000/Month with no lengthy sales process and a 100 percent money-back guarantee.

If your Laravel app gives users a site, a storefront, or a workspace, they’ll eventually want their own domain. The name.com API lets them search, register, and connect one without leaving your product. It’s a clean REST API, so Laravel’s HTTP client is all you need.