← All frameworks
70
Laravel
modern
php · backend · since 2011
acceptable
Updated October 2026
Laravel scores 71/100. Verdict: Acceptable.
Dimension breakdown
Security
50 total CVEs on record. 5 critical severity.
Total Cves
50
Critical Cves
5
Exploited Cves
0
Avg Cvss
5.0
Cves Last Year
10
Performance
Average performance. Room for optimization.
Ecosystem
80,000 GitHub stars. 2,500 contributors. 20 releases in the last year.
Stars
80,000
Contributors
2,500
Releases Last Year
20
Avg Issue Close Days
3
Ai Readiness
Good AI-readiness. Supports structured data output and API patterns. Suitable for the AI-first web with some configuration.
Structured Output
74
Api First
0.0
Headless Capable
1.0
Developer Experience
Strong developer experience. Good docs, modern tooling, active community.
Market Trajectory
Score
60
Market Share Pct
1.8
Cost Of Ownership
Moderate cost. Requires traditional server infrastructure.
Actively exploited vulnerabilities
Updated 2026-10-11
3 entries
3 confirmed vulnerabilities being actively exploited in real attacks right now. Source: CISA Known Exploited Vulnerabilities.
97% probability of exploitation within 30 days
EPSS score · FIRST.org
Latest entry: 2026-03-20
Laravel scores 71/100 overall. Strongest dimension: ecosystem (80). Weakest: market trajectory (60).
Compare Laravel
Latest Laravel insights

Laravel 13.35.0 is mostly small database fixes, plus a few for queues
October 9, 2026 · 4 min
Moving Pinkary to Laravel Cloud exposed shortcuts its old setup had hidden
October 2, 2026 · 4 min
8 Frameworks Shipped Updates in One Week — Why It Matters
July 2, 2026 · 5 min
Framework-Native CMS on Laravel: What the CVE Ledger Shows
June 30, 2026 · 5 min
Laravel Monolith Scale: When Codebases Require Automated Boundary Discovery
June 29, 2026 · 5 min
3 Frameworks Ship Zero GitHub Releases. 8 Ship 50+. The Release Transparency Divide Is a Security Signal.
June 24, 2026 · 5 min
Laravel's Core Email Handling Has a CRLF Injection Flaw. It's Not a Plugin.
June 21, 2026 · 5 min
Laravel-Lang: 5,561 Repos Backdoored in 90 Minutes via Git Tag Rewrite
June 13, 2026 · 6 min
Laravel 13: PHP's Best Framework Just Shipped Again. The Language Isn't Done.
June 12, 2026 · 4 min