Laravel has published framework v12.67.0 on the 12.x branch. The release shipped on 18 August and bundles six merged pull requests.
Two changes by crynobone close security-relevant gaps. Temporary upload URLs now read the upload value strictly from the request's query string (PR #61145), and a validation rule was tightened so it can no longer be bypassed through loose comparison (PR #61146).
Also from crynobone: single quotes in Postgres JSON path attributes are now escaped correctly (PR #61192). Kieran Brown added retries for timed-out cloud agent long-polls (PR #61178).
Tim MacDonald promoted nested data to the top level of managed queue events (PR #61225). OutlawPlz backported PR #60908 to 12.x, eliminating quadratic wildcard rule expansion in validation (PR #61232). Contributors to this release: crynobone, OutlawPlz, timacdonald, and kieranbrown.
Comments
No comments yet — be the first.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.