脆弱性・アップデート
3 ページ目
5月21日(木)
Migrating a Hybrid Architecture to Laravel Cloud: Top Q&A Questions Answered
Trybe shared how they migrated from Laravel Vapor to Laravel Cloud in a live webinar. Here are the top developer questions from the Q&A, answered.
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Project: Drupal core Project machine name: drupal Date: 2026-May-20 Security risk: Highly critical 23 ∕ 25 AC:None/A:None/CI:All/II:All/E:Exploit/TD:Uncommon Vulnerability: SQL injection Affected versions: >= 8.9.0 < 10.4.10 || >= 10.5.0 < 10.5.10 || >= 10.6.0 < 10.6.9 || >= 11.0.0 < 11.1.10 || >= 11.2.0 < 11.2.12 || >= 11.3.0 < 11.3.10 CVE IDs: CVE-2026-9082 Description: Drupal core includes a database abstraction API to ensure that queries executed against the database are sanitized to prevent SQL injection attacks. A vulnerability in this API allows an attacker to send specially crafted re…
5月15日(金)
Building AI Agents with Laravel: No Python Required
The Laravel AI SDK is the LangChain PHP alternative: agents, tools, memory, streaming, and multi-agent workflows, entirely in PHP. No Python required.
Introducing Laravel PAO: Cleaner Output for AI Agents
Laravel PAO formats PHPUnit, Pest, PHPStan, Rector, and Artisan output into structured JSON for AI agents automatically and without changing your terminal.
Building AI Agents with Laravel: No Python Required
The Laravel AI SDK is the LangChain PHP alternative: agents, tools, memory, streaming, and multi-agent workflows, entirely in PHP.
5月12日(火)
Longhorn PHP 2026 - Call For Papers
Longhorn PHP is back, with a slightly updated format - this year our conference in Austin, TX, will feature a tutorial day (Thursday, October 15), followed by a main conference day (Friday, October 16). We are currently accepting talk and tutorial submissions. While the CFP is open, we also have our Blind Bird tickets available for sale. Register today! Follow us on signup for emails at to get notified with important conference updates. Mastodon longhornphp.com
5月8日(金)
Laravel AI Integration: Build a Document Search Agent
Learn how to build a document search agent with the Laravel AI SDK. Upload files, generate vector embeddings, and stream answers to the browser in real time.
PHP 8.5.6 Released!
The PHP development team announces the immediate availability of PHP 8.5.6. This is a security release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.6 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.2.31 Released!
The PHP development team announces the immediate availability of PHP 8.2.31. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.31 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.4.21 Released!
The PHP development team announces the immediate availability of PHP 8.4.21. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.21 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
5月7日(木)
PHP 8.3.31 Released!
The PHP development team announces the immediate availability of PHP 8.3.31. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.31 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
5月4日(月)
JetBrains PHPverse 2026
Join us for on June 9 – a global live streaming event dedicated to modern PHP practices and the future of the language. JetBrains PHPverse 2026 This year's lineup features talks by renowned voices in the PHP community, including Larry Garfield, Fabien Potencier, Nils Adermann, Elizabeth Barron, and more. You can tune in for the whole day or drop in for the talks that interest you most. . See the full program here 📅 📍 – free and open to everyone June 9, 2026 Online In 2025, PHPverse reached over 55,000 developers worldwide — be part of it this year! . Register now
5月2日(土)
Laravel April Product Updates
Passkeys, debounceable jobs, MCP UI app support, mobile Cloud, and PHP 8.5 in Forge. Here's everything that shipped in April.
5月1日(金)
From Zero to Product: A Guide for Building a SaaS with Laravel
Build a production-ready SaaS the Artisan way with Laravel: Starter Kits, Socialite, Cashier, Pennant, and Laravel Cloud.
The Easiest and Fastest Way to Build MCP and Claude Apps
Laravel MCP Apps let your MCP tools return live, interactive HTML, all rendered inline inside Claude and VS Code Copilot. One command to scaffold.
4月24日(金)
Laravel Cloud Pre-Check: Is Your App Ready to Deploy?
Run the free Laravel Cloud Pre-Check to get an instant compatibility report for your app. Find out what to fix before you migrate in just a few minutes.
4月23日(木)
Why You Should Consider a Laravel Partner for Your Next Project
Learn more about the Laravel Partner program and why you should choose a Laravel Partner for your next project.
4月17日(金)
Deploy a Laravel MCP App to Production with Laravel Cloud
Build and deploy a Laravel MCP app on Laravel Cloud. We cover tool implementation, error handling, authentication, testing, and production monitoring.
4月16日(木)
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
Project: Drupal core Project machine name: drupal Date: 2026-April-15 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross-site scripting Affected versions: >= 11.3.0 < 11.3.7 CVE IDs: CVE-2026-6367 Description: Drupal 11.3 comes with support for completing entity suggestions whilst adding a link to CKEditor 5. The suggestions aren't sufficiently sanitized and a malicious user could trigger a stored cross site scripting attack against another user. Solution: Install the latest version: If you use Drupal 11.3.x, update to Drup…
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Project: Drupal core Project machine name: drupal Date: 2026-April-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget Chain Affected versions: >= 8.0.0 < 10.5.9 || >= 10.6.0 < 10.6.7 || >= 11.0.0 < 11.2.11 || >= 11.3.0 < 11.3.7 CVE IDs: CVE-2026-6366 Description: Drupal core contains a chain of methods that could be exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vector that can be used to achieve remote code execution or…
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
Project: Drupal core Project machine name: drupal Date: 2026-April-15 Security risk: Critical 15 ∕ 25 AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:All Vulnerability: Cross-site scripting Affected versions: >= 8.0.0 < 10.5.9 || >= 10.6.0 < 10.6.7 || >= 11.0.0 < 11.2.11 || >= 11.3.0 < 11.3.7 CVE IDs: CVE-2026-6365 Description: Drupal core's jQuery integration for AJAX modal dialog boxes does not sufficiently sanitize certain options, which can lead to a cross-site scripting (XSS) vulnerability. Solution: Install the latest version: If you use Drupal 10.5.x, update to Drupal 10.5.9 . If yo…
4月14日(火)
How I Built an AI-Powered CRM with Laravel in a Week
How a senior freelance developer built a full Laravel MVP in under a week using Laravel Herd, Cloud, and the AI SDK to automate critical workflows.
4月10日(金)
PHP 8.4.20 Released!
The PHP development team announces the immediate availability of PHP 8.4.20. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.20 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.5.5 Released!
The PHP development team announces the immediate availability of PHP 8.5.5. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.5 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
4月2日(木)
Meet Maestro: How We Manage 21 Laravel Starter Kit Variants Without Losing Our Minds
Learn how Maestro solves the challenge of maintaining 21 Laravel starter kit variants across 8 repositories, using layered builds, priority-based sync, and a contributor workflow designed to scale.
Laravel March Product Updates
# Laravel March Product Updates March was a big month for product updates. Laravel 13 brings first-party AI tooling to the framework, Laravel Cloud now has a free trial with no credit card required,...
3月28日(土)
Laravel AI SDK: Building Production-Safe Database Tools for Agents
Build production-safe database tools with the Laravel AI SDK. Scope Eloquent queries by user, add vector search with SimilaritySearch, and prevent prompt injection.
3月27日(金)
Cutting Laravel Cloud Load Times by 60% with Nightwatch
How we cut environment dashboard response times from 907ms to 354ms with Laravel Nightwatch by fixing N+1 queries, redundant data, and deferring load.
3月26日(木)
Scheduled Autoscaling for Laravel Cloud
You can now [define a scaling schedule on Laravel Cloud](https://laravel.com/cloud/docs/compute#scheduled-autoscaling) and let it handle the rest. Set your autoscaling limits once for each traffic win...
Inertia v3: What's Changed Since the First Beta
What changed in Inertia v3 since the first beta: simpler layout props, Vite 8 support, a withApp callback, and new Blade components.
3月25日(水)
K6 Load Testing on Laravel Cloud: 17,000 Requests per Second and Autoscaling Under Pressure
Learn how to load test a Laravel app with k6: 20,000 virtual users, bimodal latency jitter, and Laravel Cloud autoscaling under real pressure. Here's what happened.
3月20日(金)
Laravel Cloud CLI: Deploy and Manage Laravel Apps from the Terminal
The Laravel Cloud CLI lets you deploy Laravel apps, manage environments, and run Artisan commands from the terminal. Install via Composer and skip the dashboard.
3月18日(水)
Which AI Model Is Best for Laravel?
We benchmarked 6 AI models on 17 real Laravel tasks, with and without Laravel Boost. See which model wins, which fails, and by how much.
Managed Databases Are Now Available in Laravel Forge
Let Laravel Forge handle managed Postgres clusters for you with automated backups, PITR, high availability, and monitoring, all from your Forge dashboard.
3月14日(土)
Building Multi-Agent Workflows with the Laravel AI SDK
Build Anthropic's five multi-agent patterns with the Laravel AI SDK, from prompt chaining and routing to parallelization, and more.
Laravel MCP Server: Auth & Security Best Practices
Add authentication to your Laravel MCP server without writing an authorization server. Plus, security best practices.
3月13日(金)
PHP 8.5.4 Released!
The PHP development team announces the immediate availability of PHP 8.5.4. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.4 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
PHP 8.4.19 Released!
The PHP development team announces the immediate availability of PHP 8.4.19. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.19 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
Laravel MCP: A Complete Guide
Learn how to build a Laravel MCP server with tools, resources, and prompts. Step-by-step guide to exposing your app to AI clients like Claude and ChatGPT.
3月11日(水)
WordPress 6.9.2 Release
WordPress 6.9.2 is now available This is a security release that features several fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 6.9.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic […]
3月6日(金)
Inertia.js v3 Is Now in Beta
Inertia.js v3 beta is out. No more Axios, a new Vite plugin handles SSR automatically, and optimistic updates are now built in. Upgrade guide included.
3月5日(木)
Laravel AI SDK, Boost, or MCP: Which Tool Do You Need?
Laravel AI SDK, Boost, and MCP serve different purposes. Learn when to use each one, how they work together, and how to build faster with Laravel.
3月3日(火)
Introducing the Laravel Community App
Discover Laravel events, meet your people, and level up as a developer. Download the Laravel Community app on iOS and Android.
Laravel Cloud API and CLI: Ship Faster, Automate More
The Laravel Cloud API and CLI are now GA. Ship faster, automate more, and manage more infrastructure without growing your team.
Laravel February Product Updates
Laravel Cloud API & CLI, MySQL 8.4 upgrade notice, Forge MySQL 9, Nightwatch MCP & Linear integration, and new Framework AI updates.
2月24日(火)
Your AI Agent Can Now Deploy to Laravel Cloud (and Write This Blog)
Laravel Cloud's API lets AI agents deploy, scale, and manage infrastructure through conversation. See how Florian built a working OpenClaw skill in a few hours.
2月21日(土)
Laravel Cloud Incident Report: February 20, 2026
## Summary On February 20, 2026, [Laravel Cloud](https://laravel.com/blog/one-minute-or-less-how-we-built-laravel-clouds-architecture) experienced a connectivity outage lasting approximately 3 hours...
2月13日(金)
PHP 8.5.3 Released!
The PHP development team announces the immediate availability of PHP 8.5.3. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.3 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
2月12日(木)
PHP 8.4.18 Released!
The PHP development team announces the immediate availability of PHP 8.4.18. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.18 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog
2月11日(水)
Larabelles: Building Space in the Laravel Community
Larabelles creates space for underrepresented developers in Laravel through scholarships, mentorship, and community. See how to join or support the movement.