What "replacements" are you talking about here? Laravel has tried to push PHP in the right direction in a huge way, but it's not without its minor problems, ei

What "replacements" are you talking about here? Laravel has tried to push PHP in the right direction in a huge way, but it's not without its minor problems, either. Additionally, like any non-trivial code base it's had some vulnerabilities. Now of course nobody uses Laravel, they just hand-roll, so the sorts of bugs you see in the PHP world are more pattern based (e.g. injection, XSS) than you'd see in a platform like Rails that is driven by convention.