@packagist@phpc.social, when you get a chance, could you please tag a 2.10.0-RC2 release to fix the vulnerability in 2.10.0-RC1. Thank you.