Use GitHub's private vulnerability reporting to share the security issue details privately. If you can't use it, email the details to javier.eguiluz@gmail.com instead.

If your report is related to one of the Symfony security features that we use in this project (voters, authorization, role checks, etc.) we'll forward it privately to the Symfony security team.