Slim 4.15.3 released
We have released Slim 4.15.3 today that fixes a route parameter constraint bypass vulnerability in Slim >= 4.0.0, <= 4.15.2 (GHSA-h377-p8x2-prf9). If you are using Slim 4.0.0 or any later version up to 4.15.2 and use route placeholder values without revalidating them, please upgrade to Slim 4.15.3.
In addition we have fixed an issue with invalid UTF-8 in JSON error rendered output and addressed a couple of issues that show up with using Slim with a long-lived runtime.
The full changelog can be seen here.