We are focusing our security updates on the following versions
Version | Supported |
---|---|
1.7.x | ✅ |
1.6.x | |
< 1.6 | ❌ |
Versions with direct-install
command.
If you cannot update to the latest stable version available because, for example, your server does not meet the minimum PHP requirements, you can manually install a previous version by downloading the package from our Releases directory (https://github.com/getgrav/grav/releases).
Please contact security@getgrav.org with a detailed explaination of the security issue found and we will work with you to get it resolved as fast as possible.