Bump laravel/framework from 5.8.38 to 6.20.26 #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

dependabot wants to merge 1 commit into master from dependabot/composer/laravel/framework-6.20.26

Open

Bump laravel/framework from 5.8.38 to 6.20.26 #7

Bump laravel/framework from 5.8.38 to 6.20.26

Codacy Production / Codacy Static Code Analysis required action Oct 2, 2025 in 0s

1 new security issue (0 max.).

Here is an overview of what got changed by this pull request:

Issues
======
- Added 2

See the complete overview on Codacy

Annotations

Check warning on line 1838 in composer.lock

codacy-production / Codacy Static Code Analysis

composer.lock#L1838

Insecure dependency composer/league/[email protected] (CVE-2025-46734: league/commonmark is a PHP Markdown parser. A cross-site scripting (XS ...) (update to 2.7.0)

Check warning on line 1838 in composer.lock

codacy-production / Codacy Static Code Analysis

composer.lock#L1838

Insecure dependency composer/league/[email protected] (GHSA-c2pc-g5qf-rfrf: league/commonmark's quadratic complexity bugs may lead to a denial of service) (update to 2.6.0)

View more details on Codacy Production