Statamic Security
Get Statamic security advisories by email, including affected versions and available fixes or mitigations.
Our approach to security
Security is part of how we build and maintain Statamic. We work to prevent vulnerabilities, and we investigate credible reports promptly. When we confirm an issue, we work to release a fix as quickly as we can and publish an advisory with affected versions and practical next steps.
Published Advisories
Read confirmed security advisories, including affected and patched versions and the available fixes.
Report a Vulnerability
Found a potential issue in Statamic itself? Send the details privately to the maintainers through GitHub.
Security Policy
See what is in scope and what to include before sending a vulnerability report.
How to Update Your Site
Follow the official updating guide to apply a patched version to your site.
Version Support
Check which Statamic major versions still receive security fixes and when that support ends.