Security fixes are released for the latest major version, currently 8.x. Please check that the problem still happens on the latest release before reporting.

Please do not report security problems in public issues, discussions or pull requests.

Report them privately, in one of two ways:

• GitHub: report a vulnerability (Security tab, then "Report a vulnerability").
• Email: q@laravolt.dev

Include the affected version, the steps to reproduce, and what an attacker could do with it. We will confirm that we received the report and keep you updated while we work on a fix. Unless you prefer otherwise, we credit you in the advisory.