BlackTree Lifecycle

PRODUCT FAMILYFRAMEWORKVERIFIED

Laravel

Laravel is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Lifecycle status

No support or retirement date is shown unless BlackTree can link it to a registered publisher source. A missing date means that a boundary is not publicly stated, has not yet been extracted, or still needs source routing. It does not mean the product is supported indefinitely.

Product overview

Main capabilities

Application development components
Versioned runtime or build interfaces
Security and compatibility maintenance

Typical use

Used by software teams to build, run or maintain applications.

Deployment

Included in source projects, application dependencies, build systems or managed runtimes.

Lifecycle records

Release	Boundary	Date
10	Support ends	4 February 2025
11	Support ends	12 March 2026
12	Support ends	24 February 2027
13	Support ends	March 2028

Official sources

VERIFIED

Laravel official lifecycle source

Checked automatically.

Extracted 4 lifecycle record(s), including 4 bounded date record(s), from the registered official source.

Open publisher source

Package vulnerability advisories

CVE-2026-48019

Laravel Framework: CRLF injection in default email rule

Fixed: 13.10.0, 12.60.0

CVE-2021-21263

Query Binding Exploitation

Fixed: 8.22.1, 6.20.11, 7.30.2

CVE-2018-15133

Laravel Framework RCE Vulnerability

Fixed: 5.6.30

GHSA-crmm-hgp2-wgrp

Laravel Framework: Temporary Signed URL Path Confusion

Fixed: 13.12.0, 12.61.1

CVE-2025-27515

Laravel has a File Validation Bypass

Fixed: 12.1.1, 11.44.1, 10.48.29

CVE-2021-43808

Laravel Framework XSS in Blade templating engine

Fixed: 6.20.42, 7.30.6, 8.75.0

CVE-2024-13919

Laravel framework susceptible to reflected cross-site scripting

Fixed: 11.36.0

CVE-2024-13918

Laravel framework susceptible to reflected cross-site scripting

Fixed: 11.36.0