最新のセキュリティ情報
5 ページ目
11月13日(木)
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13081 Description: Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vector that can be used to achieve remote code execution if the…
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All Vulnerability: Denial of Service Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13080 Description: Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not.…
11月8日(土)
Building Community and Innovation with Laravel Senegal: The Artisan of the Day Is Idrissa Ndiouck.
Idrissa Ndiouck, co-founder of Laravel Senegal and developer at GBG, is using Laravel to empower a new generation of African developers and innovators.
11月7日(金)
PHP 8.5.0 RC4 available for testing
The PHP team is pleased to announce the final planned release candidate of PHP 8.5.0, RC 4. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 RC4, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is a test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEW…
11月1日(土)
Taking Laravel Across the Pond: The Artisan of the Day Is Bill Mitchell.
Bill Mitchell shares his Laravel journey from Vancouver Island to Scotland, building quality software at Isolocity and launching his music app, RadioPuppy.
10月31日(金)
betterCode() PHP 2025
With version 8.5, PHP continues to evolve in its thirtieth year: the new pipe operator and numerous performance improvements make your development more efficient. At the same time, FrankenPHP is establishing itself in Caddy Server, a European open-source solution, as a modern alternative to Nginx. betterCode() PHP supports you in using PHP 8.5, switching to FrankenPHP and the Caddy Server. Artificial intelligence is also part of the software development toolkit today: if you want to use it effectively, you need clear architectures, clean code, and solid patterns. is an online conference lasti…
10月30日(木)
How to Fix 502 Error: PHP-FPM Socket Issues in PHP/Laravel Forge
Learn how missing or broken PHP-FPM sockets cause 502 Bad Gateway issues in Nginx, and how to restart PHP-FPM to resolve them.
10月25日(土)
From .NET to Laravel: The Artisan of the Day Is Bilal Haidar.
Bilal Haidar is a Laravel expert who builds full-stack platforms, leveraging the framework’s productivity features and mentoring others in the ecosystem.
10月24日(金)
PHP 8.3.27 Released!
The PHP development team announces the immediate availability of PHP 8.3.27. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.27 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.14 Released!
The PHP development team announces the immediate availability of PHP 8.4.14. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.14 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.5.0 RC 3 available for testing
The PHP team is pleased to announce the third release candidate of PHP 8.5.0, RC 3. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 RC3, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEWS…
10月18日(土)
Streaming Global Live Events with Laravel. The Artisan of the Day Is Gustavo Karkow.
Gustavo Karkow’s Laravel journey spans public healthcare and streaming global live events, proving how great software can serve people at every scale.
10月13日(月)
How Romega Cut 250 Hours of DevOps Work with Laravel Forge
Romega Software saves up to 250 hours a year, cuts infrastructure costs, and scales software projects without adding headcount by using Laravel Forge.
10月10日(金)
Fullstack Cybersecurity with Laravel. The Artisan of the Day Is Akhila Sreekumar.
Akhila Sreekumar shares her journey from India to Sweden, using Laravel to build fullstack cybersecurity apps and grow her career.
Laravel Nightwatch Achieves SOC 2 Type 1 Certification
Laravel Nightwatch achieves SOC 2 Type 1 certification, enhancing security and compliance for monitoring Laravel applications in enterprise environments.
PHP 8.5.0 RC 2 available for testing
The PHP team is pleased to announce the second release candidate of PHP 8.5.0, RC 2. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 RC2, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEW…
10月9日(木)
PHP Conference Kagawa 2025
The first PHP Conference Kagawa held last year was a great success. This year, the event will once again take place in the same traditional Japanese venue, designated as an Important Cultural Property of Japan. Join us in Kagawa, one of Japan’s popular travel destinations, and connect with fellow PHP developers from across the country! Basic facts Date: November 24, 2025 (JST) Location: Takamatsu City, Kagawa Prefecture, Japan Further information will be available on the and . Buy tickets: event page X(Twitter) https://fortee.jp/phpconkagawa-2025/ticket-shop/index
10月8日(水)
PHP Conference Hiroshima 2025
That technical problem you've been struggling with alone? Turns out the person next to you has been wrestling with the same thing. Why not come to Hiroshima and experience that moment of discovery and sence of relief for yourself? We hope this conference will be not only a place to gain knowledge, but also a place to meet like-minded peers. Learn from others' experience, inspire each other, and share your own insights. As this cycle of learning continues, connections are made, and the PHP community of tomorrow grows even stronger. Let's make that day together. Basic info 📅 10/11 2025 📍 Yale…
10月7日(火)
Server Management Doesn’t Have to Be a Full-Time Job: Somnio Tech’s Story
Camilo Martinez of Somnio Technology Solutions manages over 20 servers, reduces infrastructure complexity, and delivers client projects faster by using Laravel Forge.
10月3日(金)
PHP Conference Fukuoka 2025
We are pleased to announce the PHP Conference Fukuoka 2025. PHP Conference Fukuoka celebrates its 10th anniversary this year, and this edition will be the final one. Since its first edition in 2015, the conference has aimed to boost the IT industry in the Kyushu region and provide a place where PHPers from Kyushu and all over Japan can connect and exchange ideas. We hope this last gathering will once again inspire participants, spark new ideas, and create lasting connections. (The conference will be conducted in Japanese) Basic facts Date: November 8, 2025 (JST) Location: Fukuoka, Japan For m…
10月2日(木)
Evolving Legacy at Scale. The Artisan of the Day Is Sara Bine.
Sara Bine shares her journey from RuneScape IRC bots to leading BetterHelp’s Laravel migration, blending legacy expertise, mentorship, and smart architecture.
10月1日(水)
Everything You Need to Know About the New Forge & Laravel VPS
Optimized for PHP and beyond, the new Forge comes with instant provisioning via Laravel VPS, zero-downtime deployments, automated SSL, and a modern UI.
From Minecraft Servers to Full-Stack Development. The Artisan of the Day Is Matilde Enevoldsen.
Matilde Enevoldsen shares her journey from Minecraft sites to Laravel pro, building a course platform and advocating for pragmatic, fundamentals-first development.
9月29日(月)
Breathing New Life into Legacy Systems. The Artisan of the Day Is Elena Cañete.
Elena Cañete modernizes legacy systems with Laravel, turning clunky code into scalable solutions while inspiring developers to embrace tough projects.
9月28日(日)
From Freelancer to Laravel Architect. The Artisan of the Day Is Wendell Adriel.
Wendell Adriel shares his journey from freelancer to enterprise Laravel architect.
Laravel Skepticism Turned into Advocacy. The Artisan of the Day Is Nick Basile.
Nick Basile shares how Laravel transformed his career, powered Markham Square projects, and connected him to lasting opportunities and community.
9月27日(土)
Using Laravel to Power an AI Storytelling Startup. The Artisan of the Day Is Kyle Arch.
Kyle Arch, Laravel contributor and founder of Odie, shares how Laravel powers his journey from scaling SaaS at Dropbox to building AI tools for kids.
9月26日(金)
PHP 8.5.0 RC 1 available for testing
The PHP team is pleased to announce the first release candidate of PHP 8.5.0, RC 1. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 RC1, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEWS…
PHP 8.3.26 Released!
The PHP development team announces the immediate availability of PHP 8.3.26. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.26 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.13 Released!
The PHP development team announces the immediate availability of PHP 8.4.13. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.13 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Invoicing with Laravel. The Artisan of the Day Is George Drakakis.
George Drakakis, founder of Laravel.gr and creator of Billit.io, shares how Laravel made it possible to build one of Greece’s well-known invoicing SaaS products.
9月24日(水)
Building Laravel Senegal. The Artisan of the Day Is Kheraba Diaby.
Kheraba Diaby, backend dev at Alal Technologies, founded Laravel Senegal to connect developers and grow the local Laravel community.
PHP Conference Brazil 2025
Come join the 20th year of the main andd longest living PHP Conference in Latin America! Official website: https://phpconference.com.br/
Laravel Keeps Teams Lean. The Artisan of the Day Is Steve Beyatte.
Steve Beyatte shares how Laravel powers his lean startups, scaling to seven-figure exits and $1M revenue faster than big engineering teams.
9月23日(火)
From Game Development to Bootstrapped Success. The Artisan of the Day Is Val Hinov.
Valentin Hinov built Thankbox into a million-dollar business with Laravel, turning a side project into a thriving bootstrapped SaaS.
9月21日(日)
Bringing Security to the Laravel Community. The Artisan of the Day Is Stephen Rees-Carter.
Stephen Rees-Carter, security expert and Laravel educator, shares his journey, tools, and advice for building secure, impactful apps.
Building the Tools You Wish You Had. The Artisan of the Day Is Mohamed Charrafi.
Mohamed Charrafi, creator of SheafUI and Converge, shares how solving his own problems turned into open-source projects, raising the bar for Laravel developers.
9月20日(土)
Laravel, Kilopixel, and Building for Human Connection. The Artisan of the Day Is Ben Holmen.
Ben Holmen, Zillow engineering manager, shares his Laravel journey, Kilopixel project, and insights on building tech and community with empathy.
9月19日(金)
Laravel Idea Plugin is Free for PhpStorm
As an IDE we recommend, we’re very happy that PhpStorm users can now use the Laravel Idea plugin for free.
Breaking Barriers in Education and Technology. The Artisan of the Day Is Fathima Fasna.
Fathima Fasna shares how Laravel transformed her career, from breaking barriers in Sri Lanka to joining the global Laravel Community after relocating to Morocco.
9月18日(木)
Introducing Laravel MCP: Build with the Universal AI Standard
The Laravel MCP library enables you to build Model Context Protocols with ease, so your apps can meet users where they are and where they’ll be: AI chats.
Using Tech to Tackle Homelessness. The Artisan of the Day Is Kevin McKee.
Kevin McKee, CTO of Padmission, explains how he uses Laravel to power the SaaS platform helping communities fight homelessness with secure software solutions.
9月17日(水)
From Self-Taught PHP to SaaS Creator. The Artisan of the Day Is Vladimir Nikolic.
Vladimir Nikolic shares his journey from self-taught PHP beginner to Laravel SaaS creator and community organizer, building products and mentoring developers worldwide.
9月16日(火)
Your Software Should Be Fantastic. The Artisan of the Day Is Marc Beinder.
Marc Beinder, of Encore Digital Group and PHPxSTL, went from procedural PHP to building Laravel tools and leading the community in St. Louis.
1M Deploys on Laravel Cloud: Lessons on Billing, Admin & Integrations
Laravel Cloud hit 1M deployments since EA. Here’s how we built billing, admin tools, and integrations to support every deployment.
9月15日(月)
Building Up the Laravel Community in the Philippines: The Artisan of the Day Is Prince John Santillan.
Prince John Santillan found his footing with Laravel, connected at Laracon Australia, and launched the PHPxCebu meetup.
9月14日(日)
From PHP3 to Laravel Live. The Artisan of the Day Is Kasper Hartwich.
Kasper Hartwich shares his journey from PHP3 days to organizing Laravel Live Denmark, and why bold ideas and community matter for Laravel’s future.
9月13日(土)
The Laravel Fanboy Who Made NativePHP Possible. The Artisan of the Day Is Shane Rosenthal.
Shane Rosenthal co-founded NativePHP and Bifrost, enabling Laravel developers to build native mobile apps. His latest platform surpassed $200K in sales in its first six months.
9月12日(金)
PHP 8.5.0 Beta 3 available for testing
The PHP team is pleased to announce the third beta release of PHP 8.5.0, Beta 3. This continues the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 Beta 3, please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEWS…
From Numbers to Code. The Artisan of the Day Is Kristian Just Kastrup.
From accounting to agency life, Kristian Just Kastrup shares how he built a career around Laravel, from early frustrations to organizing Laravel Live Denmark.