With some exceptions, only the latest minor official release of UserFrosting 5 (5.x) currently receive patches for security vulnerabilities. Previous minor versions won't be patched.
As for UserFrosting 4, the latest minor version might be patched if the fix is simple. It is recommended to upgrade to UserFrosting 5 at this time.
No update shall be done to version older than 4.6.x in any cases.
| Version | Supported |
|---|---|
| 5.2.x | ❌ |
| 5.1.x | ✅ |
| 5.0.x | ❌ |
| 4.6.x | ❌ |
| < 4.6 | ❌ |
Please report (suspected) security vulnerabilities to the main contributors (listed below) by contacting us directly or on Chat. If you have a fix, don't hesitate to explain or attach it. Using the issue system should be avoided for suspected security vulnerabilities. We'll try our best to reply in due time. If the issue is confirmed, we will see to release a patch as soon as possible depending on complexity.
Alternatively, you can submit a security advisory through GitHub.
If you have suggestions on how this process could be improved please submit a pull request.