End of life / Laravel / 13
Laravel 13 end of life
Laravel 13 reaches end of life on 17 March 2028, in 512 days. 3 known CVEs reach this release, the most severe rated HIGH.
The detail
- Released
- 17 March 2026
- End of life
- 17 March 2028
- Countdown
- in 512 days
- Status
- Supported
- Long term support
- No
- Newest build on this release
- 13.38.0
- Newest release overall
- 13.38.0
CVEs that reach 13
| Advisory | Severity | CVSS | Published | Fixed in |
|---|---|---|---|---|
| GHSA-5vg9-5847-vvmq Laravel Framework: CRLF injection in default email rule | HIGH | 8.9 | 17 June 2026 | 13.10.0 |
| GHSA-crmm-hgp2-wgrp Laravel Framework: Temporary Signed URL Path Confusion | MEDIUM | 4.2 | 17 June 2026 | 13.12.0 |
| CVE-2026-102279 Laravel: XSS in Debug Page Information | LOW | 3.1 | 29 September 2026 | 13.30.0 |
Where to move next
The newest tracked release is 13.38.0. If moving release is not an option yet, 13.38.0 is the newest build on the 13 line and needs no migration.
Other Laravel releases
Vendor sources last checked 22 October 2026, and checked daily. This data last changed on 22 October 2026.
Be told before Laravel 13 runs out
One email, ahead of the date, and nothing else. No account, no newsletter, and every message carries a link that stops them for good.
You just looked this up by hand, for one version
You had to already know you were running this version to search for it. StackDrift scans your machines and works that out for you, across every runtime, operating system and kernel underneath your code, then mails you before the next support window closes or a CVE lands on a build you have deployed.
A card is needed to open the trial and nothing is charged until it ends.