Composer issue php8.4 security

[zstergios]

"verot/class.upload.php": "^2.1"
or
"verot/class.upload.php": "*"

is no logger working.

Any update?

[verot]

The class is working fine with PHP 8.4, and you can choose not to honor the security advisory.

The security advisory explains that the developer needs to be careful when configuring the class, and that the README has been updated in that regard. Well configured, the class is not vulnerable.