Security fixes are provided for the latest release of the 2.x series.
| Version | Supported |
|---|---|
| 2.x | Yes |
| < 2.0 | No |
Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.
Report them privately using GitHub's private vulnerability reporting ("Security" tab → "Report a vulnerability").
Please include as much of the following as you can:
- the affected version(s) and PHP version,
- a description of the issue and its impact,
- a minimal HTML input or code sample that reproduces it.
We will acknowledge your report, keep you informed while we investigate, and coordinate a fix and disclosure with you. Once a fix is released, the vulnerability will be published as a GitHub security advisory.