Security fixes are provided for the latest supported 2.x release.

Do not publish vulnerability details in a public issue. Use GitHub's private vulnerability reporting for this repository when available. If that option is unavailable, email the maintainer at hugo.seigle03@gmail.com with the subject Security: symfony-import-export-bundle.

Include the affected version, impact, reproduction steps or proof of concept, and any suggested remediation. Do not include production credentials or personal/imported datasets. You should receive an acknowledgement within seven days. Please allow time to investigate and coordinate a fix before public disclosure.