Security fixes are intended for the latest maintained release line of this package.

If you report a vulnerability, please include:

• affected package version
• Laravel version
• PHP version
• reproduction steps
• expected impact

Please do not open a public GitHub issue for security-sensitive reports.

Instead, report vulnerabilities privately to the maintainer through your preferred private support or security channel.

When reporting, include:

• a short summary
• the affected code path
• proof of concept or reproduction steps
• any suggested remediation if available

After a valid report:

1. The issue will be reproduced.
2. A fix or mitigation will be prepared.
3. A patched release will be published.
4. Disclosure timing can be coordinated if needed.