Security fixes are released for the latest version of each Roots project.

Please report vulnerabilities privately through GitHub: open the affected repository's Security tab and choose Report a vulnerability. Don't open a public issue, pull request or discussion about it.

Include the project and version you tested, the steps or files that show the problem, and what you expected to happen. We'll follow up in the report, and credit you in the published advisory unless you'd rather not be named.