The official AI SDK for Laravel.
92%
Total Score
healthy
Frequent releases, broad recent contribution, and clear Laravel organization backing support this release.
A post-autoload-dump Composer lifecycle script runs during installation, creating a modest build-policy consideration even though no unsafe behavior is shown here.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-656434 New laravel/ai is vulnerable to Server-Side Request Forgery (SSRF) in versions 1.0.0 - 1.0.0. | 1.0.0 - 1.0.0 | Medium |
AIKIDO-2026-10386 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. laravel/ai is vulnerable to Information Disclosure in versions 0.1.0 - 0.2.8. | 0.1.0 - 0.2.8 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.2|^8.0 | — | — |
laravel/prompts Version ^0.3.6 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.