We are going to deploy the new yiiframework.com website on March 23, 2018 from 8:00 to 12:00 UTC.
Website and Yii documentation will not be available in this time frame. Check the news for more details.

Report a Security Issue

Please use the contact us form to report to us any security issue you find in Yii. DO NOT use the issue tracker or discuss it in the public forum as it will cause more damage than help.

Once we receive your issue report, we will treat it as our highest priority. We will generally take the following steps in responding to security issues.

  1. Confirm the issue. We may contact with you for further discussion. We will send you an acknowledgement after the issue is confirmed.
  2. Work on a solution.
  3. Release a patch to all maintained versions.

Contact us to report a security issue.