Dries Vints

💰 Billing engineer at @laravel working on Cloud ☁️ • 💻 Building @moneytreesapp, @eventyio & @laravelio • ⭐️ @github Star

[Dries Vints @driesvints]

📣 Moneytrees is live! So proud to be able to launch my very own SaaS finally. Over the past 4,5 months I worked hard on building it. It's how I wish other invoicing software would work. Go give it a try with the free tier and let me know what you think!

I'll share more behind-the scenes stuff soon.

[Moneytrees @moneytreesapp]

💸 We're beyond excited to launch Moneytrees. Invoice clients, keep track of expenses, get that birds-eye view of your project's financial health, download reports, share invoices and projects through a hosted client portal and more.

Start for free at https://t.co/djrKTzPiLQ

[Mike Coutermarsh @mscccc]

@hcaz32000 @Shopify @PlanetScale I’ve heard great things about rails on @laravel cloud lately.

[pushpak @pushpak1300]

Hate to be that guy 🙃, but if you’ve updated PHP, please update laravel/mcp too.

The advisory we published yesterday is patched in 1.1.0 and 0.9.7.

composer update laravel/mcp

https://t.co/5Dx1Yb6023

Stay Safe. Fam!

[Luis Dalmolin @luisdalmolin]

As if there weren't enough reasons to migrate to Laravel Cloud, on situations like today, they've patched every app running in there automatically with no action required on the users end. Great work. Can't wait for the write-up on that.

[Dries Vints @driesvints]

@janvanechelpoel RIP alle crappy overheids sites 😆

[Dries Vints @driesvints]

@petersuhm @vistikloft Top guy 👏

[Laravel @laravel]

Deployments in Laravel Cloud are now turned on globally.

You may experience failing or slow deployments in us-east-2 (Ohio) region while we conclude rolling out the security patch.

[Dries Vints @driesvints]

@gdb Please consider sponsoring Ondřej Surý as well as he maintains a crucial part of the supply line 🙏

https://t.co/2Bn4SKHtLA

[Dries Vints @driesvints]

@jbrooksuk Now you can pretend for 2 months?

[Dries Vints @driesvints]

Some days it's not great to be behind Cloudflare but on most days it is. Then it's also good to speak out about that. Thanks @Cloudflare for keeping the web a bit safer 🙏

[Cloudflare @Cloudflare]

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. https://t.co/OQG4x6x858

[Laravel @laravel]

The Laravel Cloud edge network is powered by Cloudflare.

All deployed Laravel Cloud applications, including those in dedicated zones and with custom domains, have these rules applied automatically.

We are continuing to rollout patched PHP images to address the underlying vulnerability.

[Laravel @laravel]

Multi-region, automatic rollout of patched PHP versions on Laravel Cloud will begin in the next few minutes. Final testing happening now.

[Laravel @laravel]

We have published a guide on updating your Forge provisioned servers directly via SSH, allowing you to by-pass the Forge dashboard.

https://t.co/MTDo5BeING

[Aikido @AikidoSecurity]

‼️ Two critical RCE vulnerabilities have been found in PHP itself. Treat all versions as affected, with reports going back to 5.x.

The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both have a CVSS v4.0 score of 9.2. The PHP security team will release fixes on October 21, 2026, at 2PM UTC

If you run PHP anywhere in your stack, please stay tuned for workarounds and patches. Be prepared to take action.

What you need to know about PHP2shell: https://t.co/5uhwbo8Tvl

[Laravel @laravel]

At 14:00 UTC two critical security vulnerabilities will be patched in PHP.

These are extremely serious vulnerabilities affecting every PHP application on the web.

Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.

Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.

Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.

[Pauline Vos @vanamerongen]

https://t.co/cOBD6kkM73 is on Laravel Cloud

[Dries Vints @driesvints]

@vanamerongen @enunomaduro @matthieunapoli @brendt_gd @phpstorm 1. Pastel de nata
2. Friends

It is what it is

[James Brooks @jbrooksuk]

Here's a tip I'd give new builders: deploy with @laravel Cloud. You'll thank me later.

[Marcel Pociot 🧪 @marcelpociot]

Say hello to @laravel Herd 2.0 - the local Laravel dev environment

🎙️ Herd Studio
⚡️ artisan dev / vite detection
☁️ Laravel Cloud Integration
🕵️‍♀️ Insights MCP server
💻 git worktree & copy-on-write workspace support
🧑‍⚕️ Isolated databases
💅 Refined and polished UI

...and more!

[Dries Vints @driesvints]

@OndrejMirtes That is wicked cool