Below versions of this project are currently being supported with security updates.

Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.

Report them privately instead:

• Use GitHub's private vulnerability reporting, or
• Email contact@fyndsoft.com with the subject "StrObj security report".

• A short description of the issue and the conditions that trigger it
• A minimal code sample or steps to reproduce it
• Relevant outputs and logs, with secrets and personal data removed
• The StrObj and PHP versions, and other relevant software (OS, web server)

You will receive an acknowledgement as soon as possible. Once a fix is available, it is released and the advisory is published with credit to the reporter, unless you prefer to remain anonymous.