Tickets

• Do: Please searchfor a similar existing ticket, and ensure someone hasn’t already reported yourissue, or that it hasn’t already been fixed in the repository.
• Do: Please give as many details as possible about your environment: (OS,PHP version, CakePHP version).
• Don’t: Please don’t use the ticket system to ask support questions. The#cakephp IRC channel on has manydevelopers available to help answer your questions. Also have a look atStack Overflow.

Reporting Security Issues

• Acknowledge to the reporter that we’ve received the issue, and are working ona fix. We ask that the reporter keep the issue confidential until we announceit.
• Prepare a post describing the vulnerability, and the possible exploits.
• Release new versions of all affected versions.
• Prominently feature the problem in the release announcement.