Please use GitHub's private vulnerability reporting for this repository. Include the affected route or component, the impact you observed, and a small reproduction if you have one.

Don't open a public issue for an unpatched vulnerability, and don't include other people's Share payloads or account data in the report. Maintainers will confirm receipt, reproduce the problem, and coordinate a fix before publishing details.

Security fixes target the latest tagged release. Self-hosters should update Laravel, frontend packages, and Dōzobin together because older releases don't receive separate patch branches.