最新のセキュリティ情報
4 ページ目
3月14日(土)
Laravel MCP Server: Auth & Security Best Practices
Add authentication to your Laravel MCP server without writing an authorization server. Plus, security best practices.
3月13日(金)
PHP 8.5.4 Released!
The PHP development team announces the immediate availability of PHP 8.5.4. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.4 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.4.19 Released!
The PHP development team announces the immediate availability of PHP 8.4.19. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.19 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
Laravel MCP: A Complete Guide
Learn how to build a Laravel MCP server with tools, resources, and prompts. Step-by-step guide to exposing your app to AI clients like Claude and ChatGPT.
3月11日(水)
WordPress 6.9.2 Release
WordPress 6.9.2 is now available This is a security release that features several fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 6.9.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic […]
3月6日(金)
Inertia.js v3 Is Now in Beta
Inertia.js v3 beta is out. No more Axios, a new Vite plugin handles SSR automatically, and optimistic updates are now built in. Upgrade guide included.
3月5日(木)
Laravel AI SDK, Boost, or MCP: Which Tool Do You Need?
Laravel AI SDK, Boost, and MCP serve different purposes. Learn when to use each one, how they work together, and how to build faster with Laravel.
3月3日(火)
Introducing the Laravel Community App
Discover Laravel events, meet your people, and level up as a developer. Download the Laravel Community app on iOS and Android.
Laravel Cloud API and CLI: Ship Faster, Automate More
The Laravel Cloud API and CLI are now GA. Ship faster, automate more, and manage more infrastructure without growing your team.
Laravel February Product Updates
Laravel Cloud API & CLI, MySQL 8.4 upgrade notice, Forge MySQL 9, Nightwatch MCP & Linear integration, and new Framework AI updates.
2月24日(火)
Your AI Agent Can Now Deploy to Laravel Cloud (and Write This Blog)
Laravel Cloud's API lets AI agents deploy, scale, and manage infrastructure through conversation. See how Florian built a working OpenClaw skill in a few hours.
2月21日(土)
Laravel Cloud Incident Report: February 20, 2026
## Summary On February 20, 2026, [Laravel Cloud](https://laravel.com/blog/one-minute-or-less-how-we-built-laravel-clouds-architecture) experienced a connectivity outage lasting approximately 3 hours...
2月13日(金)
PHP 8.5.3 Released!
The PHP development team announces the immediate availability of PHP 8.5.3. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.3 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
2月12日(木)
PHP 8.4.18 Released!
The PHP development team announces the immediate availability of PHP 8.4.18. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.18 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
2月11日(水)
Larabelles: Building Space in the Laravel Community
Larabelles creates space for underrepresented developers in Laravel through scholarships, mentorship, and community. See how to join or support the movement.
2月9日(月)
Laravel Live Denmark 2026
Information: Laravel Live Denmark is back! The conference is a two-day Laravel conference held in Copenhagen, Denmark on the 20 - 21. August 2026. Join us and 300 other Laravel and PHP enthusiasts from around the world got for two days of learning, 16 speakers and more within the Laravel community. August 20-21, 2026 Copenhagen, Denmark 16 speakers +300 Laravel and PHP enthusiasts For more information, see . Laravel Live Denmark 2026 You can also find us at . Twitter
2月5日(木)
Introducing the Laravel AI SDK
Build AI-powered Laravel applications with a unified SDK. Generate text, images, audio, and more across OpenAI, Anthropic, and other providers with clean, organized code.
2月3日(火)
Laravel January Product Releases
January brings Private Cloud, Valkey caching, expanded Cloud API, plus Forge backup options and Nightwatch real-time exception detection.
1月24日(土)
Creating Backup Strategies in Serverless Postgres with Laravel Cloud
Looking to save on costs while protecting your data? Read our tips for setting up a dynamic backup strategy in Laravel Cloud.
1月16日(金)
PHP 8.5.2 Released!
The PHP development team announces the immediate availability of PHP 8.5.2. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.2 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.3.30 Released!
The PHP development team announces the immediate availability of PHP 8.3.30. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.30 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.4.17 Released!
The PHP development team announces the immediate availability of PHP 8.4.17. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.17 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
1月15日(木)
Laravel Wayfinder: End-to-End Type Safety for PHP and TypeScript
Sync PHP and TypeScript automatically with Laravel Wayfinder, now in beta. Generate types, routes, and validation from your Laravel app.
1月14日(水)
PHP Velho Oeste 2026
The is a national-level conference that takes place annually in the West of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: May 29-30, 2025 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. See how it was last year: . PHP Velho Oeste 2025 Follow us on social media: / / / . LinkedIn Instagram YouTu…
1月9日(金)
Laravel December Product Releases
See what you can do with our latest product releases: set up billing alerts in Laravel Cloud, and ship faster with framework, Forge, and Nightwatch updates.
1月2日(金)
Building with Laravel for Impact. The Artisan of the Day Is Hugo Monteiro.
Hugo Monteiro, co-founder of Spotahome, builds internal Laravel systems and encourages developers to learn, connect, and create with purpose.
12月26日(金)
Building Scalable Laravel Systems. The Artisan of the Day Is Lucas Giovanny.
Laravel engineer Lucas Giovanny leads teams at Worksome, speaks at Laracon events, and builds scalable backend systems while growing the community in Portugal.
12月19日(金)
Open Source as a Way of Giving Back: The Artisan of the Day Is Daniel Petrica.
Daniel Petrica shares how Laravel shaped his career, from real estate portals to new SaaS projects and open-source contributions as a full-time freelancer.
PHP 8.1.34 Released!
The PHP development team announces the immediate availability of PHP 8.1.34. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.34 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.4.16 Released!
The PHP development team announces the immediate availability of PHP 8.4.16. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.16 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.2.30 Released!
The PHP development team announces the immediate availability of PHP 8.2.30. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.30 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.3.29 Released!
The PHP development team announces the immediate availability of PHP 8.3.29. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.29 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
12月18日(木)
PHP 8.5.1 Released!
The PHP development team announces the immediate availability of PHP 8.5.1. This is a security release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.1 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
How We Built Laravel Wrapped
Learn how Laravel's team built Laravel Wrapped in two weeks: aggregating data across products, generating 55K AI summaries, and shipping with Cloud's speed.
12月17日(水)
International PHP Conference Berlin 2026
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born – the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: June 8 – 12, 2026 Location: Maritim ProArte Hotel Berlin, Berlin or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands…
12月13日(土)
Building with Laravel for Ecommerce. The Artisan of the Day Is Gulzar Ahmed.
Gulzar Ahmed, CTO of Hyperzod, builds large-scale quick commerce systems using Laravel, and mentors devs while contributing to the community and open source.
12月6日(土)
Writing Clean Code with Laravel: The Artisan of the Day Is Jamie Peters.
Jamie Peters shares how discovering Laravel in 2018 transformed his career, sharpened his coding practices, and led him to his role at Jump24 in the UK.
12月3日(水)
Laravel November Product Releases
Laravel’s November product updates for Laravel Cloud, Forge, Nightwatch, and Laravel 12.x.
11月30日(日)
Laravel Live Japan
Laravel Live Japan is the first official Laravel community conference in Japan. It brings together developers, designers, and tech enthusiasts from around the world to share knowledge, exchange ideas, and celebrate the craft of building with Laravel. Join us in Tokyo at Tachikawa Stage Garden on May 26-27, 2026 for this premiere event. Enjoy two days of inspiring talks, hands-on learning, and unforgettable community experiences. Basic info Date: May 26-27, 2026 (JST) Location: Tachikawa City, Tokyo Prefecture, Japan Links Website: https://laravellive.jp X: https://x.com/LaravelLiveJP
11月29日(土)
Building Laravel Mauritius. The Artisan of the Day Is Percy Mamedy.
Percy Mamedy shares how Laravel transformed his career and inspired him to build Laravel Moris, a thriving developer community in Mauritius.
11月28日(金)
Best Practices for Scalable Cloud Infrastructure with Laravel Cloud
Tips for scaling cloud infrastructure in Laravel Cloud: set smart baselines, tune autoscaling triggers, and optimize replicas for stable performance.
11月21日(金)
PHP 8.5.0 Released!
The PHP development team announces the immediate availability of PHP 8.5.0. This release marks the latest minor release of the PHP language. PHP 8.5 comes with numerous improvements and new features such as: New "URI" extension New pipe operator (|>) Clone With New #[\NoDiscard] attribute Support for closures, casts, and first class callables in constant expressions And much much more... For source downloads of PHP 8.5.0 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog The is available in the PHP Manual.…
11月20日(木)
PHP 8.4.15 Released!
The PHP development team announces the immediate availability of PHP 8.4.15. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.15 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.3.28 Released!
The PHP development team announces the immediate availability of PHP 8.3.28. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.28 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
11月19日(水)
Laravel Developer-Turned-Educator. The Artisan of the Day Is Pete Heslop.
Pete Heslop shares how "Laravel for the Rest of Us" was created, why non-technical teams need shared language, and how his agency built a decade on Laravel.
11月15日(土)
Fixing Errors and Empowering Laravel Artisans. The Artisan of the Day Is Punyapal Shah.
A freelancer and community leader, Punyapal Shah built Laravel Artisans and became a voice in India’s Laravel scene through open source and livestreams.
11月14日(金)
PHP 8.5.0 RC 5 available for testing
The PHP team is pleased to announce the fifth release candidate of PHP 8.5.0, RC 5. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 RC5, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is a test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEWS UPGRAD…
Introducing WebSockets for Laravel Cloud, Powered by Laravel Reverb
Launch real-time features in seconds with WebSockets for Laravel Cloud: managed Laravel Reverb clusters for up to 50% less than third-party tools.
11月13日(木)
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information disclosure Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13083 Description: The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files (schemes) that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-…
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All Vulnerability: Defacement Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13082 Description: By generating and tricking a user into visiting a malicious URL, an attacker can perform site defacement. The defacement is not stored and is only present when the URL has been crafted for that purpose. Only the defacement is present, so no other site content (suc…