Security fixes are released for the latest version of each PHPTG package only.
Please don't report security vulnerabilities via public GitHub issues, pull requests or chats.
Instead, use the Report a vulnerability button on the Security tab of the affected package repository. The report is visible only to the maintainers.
Please include:
- the affected package and version;
- a description of the vulnerability and its impact;
- steps or code to reproduce it.
You will get a response as soon as possible. Once the vulnerability is confirmed, a fix is prepared and released, and a security advisory is published.