DO NOT PUBLISH SECURITY REPORTS PUBLICLY.
If you found any issues that might have security implications, please send a report to dariusz.ruminski+php-cs-fixer[at]gmail.com .
Report security bugs in third-party libraries directly to the group maintaining that library.