Infection is not yet stable. As such, only the latest version is supported. However, older versions may be patched depending on the severity of the vulnerability.

Please do not publicly disclose security vulnerabilities.

If you discover something that may be a vulnerability, please report it privately on GitHub.

• Go to the Security and Quality tab in the infection repository.
• Click Report a vulnerability and complete the form with as much information as possible.
• Submit the report, and we will look into it as soon as possible.

Thank you for responsibly disclosing issues in Infection.