# Report a vulnerability

> Report a vulnerability in Lettern privately. A person reads every report, and we credit you unless you’d rather we didn’t.

## Report a vulnerability.

A person reads every report.

What helps

```bash
Version  php cms --version
Steps    what you did and saw
Impact   what it exposes
Credit   your name, or none
```

Prefer GitHub?

Send it as a private security advisory.

Open an advisory

---
Source: https://lettern.org/security/report · Updated 2026-10-30