End of life / Laravel / 11
Laravel 11 end of life
Laravel 11 reached end of life on 12 March 2026, 178 days ago. 6 known CVEs reach this release, the most severe rated HIGH.
The detail
- Released
- 12 March 2024
- End of life
- 12 March 2026
- Countdown
- 178 days ago
- Status
- End of life
- Long term support
- No
- Newest build on this release
- 11.56.1
- Newest release overall
- 13.30.1
CVEs that reach 11
| Advisory | Severity | CVSS | Published | Fixed in |
|---|---|---|---|---|
| GHSA-5vg9-5847-vvmq Laravel Framework: CRLF injection in default email rule | HIGH | 8.9 | 17 June 2026 | 12.60.0 |
| CVE-2024-52301 Laravel environment manipulation via query string | HIGH | 8.7 | 12 November 2024 | 11.31.0 |
| CVE-2025-27515 Laravel has a File Validation Bypass | MEDIUM | 6.9 | 5 March 2025 | 11.44.1 |
| CVE-2024-13918 Laravel framework susceptible to reflected cross-site scripting | MEDIUM | 4.7 | 10 March 2025 | 11.36.0 |
| CVE-2024-13919 Laravel framework susceptible to reflected cross-site scripting | MEDIUM | 4.7 | 10 March 2025 | 11.36.0 |
| GHSA-crmm-hgp2-wgrp Laravel Framework: Temporary Signed URL Path Confusion | MEDIUM | 4.2 | 17 June 2026 | 12.61.1 |
Where to move next
The newest tracked release is 13.30.1. If moving release is not an option yet, 11.56.1 is the newest build on the 11 line and needs no migration.
Other Laravel releases
Vendor sources last checked 6 September 2026, and checked daily. This data last changed on 6 September 2026.
You just looked this up by hand, for one version
StackDrift scans your machines, works out every version you actually run, and mails you before the next support window closes or a CVE lands on a build you have deployed. It covers the runtimes, operating systems and kernels underneath your code, not just your packages.