The latest versions of the 2.0 and 2.1 branches are supported for security issues.

Please do not report security vulnerabilities through public GitHub issues.

Please do not report security vulnerabilities on the webtrees project forum.

Security issues should be reported directly to the project maintainer, Jonathan Jaubart.

Remember that not all emails get delivered, and that some parts of the world do not have internet access. If you do not get a reply, please send a follow-up email. If there is still no reply, try to make contact through the project maintainer's personal website genea.jaubart.com.

Please wait for the fix to become available before publishing details of the issue.

If you would like to be credited for your discovery, please say so.