Due to the nature of our project - being open source - we have decided to patch only the latest major release (currently v1.x) for security vulnerabilities.
Please use huntr.dev for security issues that affect our project. If you believe you have found a vulnerability, please disclose it via this form.
This will enable us to review the vulnerability, fix it promptly, and reward you for your efforts.
If you have any questions about the process, feel free to reach out to security@huntr.dev or security@flarum.org.