Security Bulletins

These are security bulletins released by the Neos project. You can also keep yourself updated by following the PHP Security Advisories Database. We recommend using a tool like roave/security-advisories or Local PHP Security Checker to check against that database.

If you discover a security issue with Neos, Flow or a related package, please contact us via security (at) instead of using a public channel. That way we can work on a fix together before everyone knows how to exploit a potential issue. Thank you!