Laravel backported a TokenGuard fix (CVE-2026-114509) to the 10.x line. A crafted array token like ?api_token[]=0 could match a real user through database type coercion. Here's the bug and why you should upgrade.
Predis 3.6.1 patches a real CRLF command smuggling CVE affecting Redis clusters. Here's what changed and why PHP/Laravel teams should upgrade now.
When it comes to web development, middleware is often the key to ensuring everything connects up - even if some of the pieces don’t always matchup. HTTP Middleware is a mechanism used to conveniently filter HTTP requests coming into your web application. When it comes to PHP, frameworks often help ...
Last month we talked about the PHP monitoring landscape in 2019 and announced that Scout APM would soon be available for monitoring your Laravel applications too (as well as your Ruby, Python and Elixir apps of course!). Now that our PHP monitoring agent is ready for beta testing, we thought it would be a good idea to show you folks how easy it is to get started with it and to highlight the main features to the Laravel community.