Only the current PHP 8.x tags (see the tag table in the README) receive security fixes. Older or -beta tags are not supported.
Please report vulnerabilities privately through GitHub's private vulnerability reporting. Do not open a public issue.
Fixes ship as image rebuilds. Images are rebuilt automatically when the upstream php base image, Debian packages, s6-overlay or Adminer change, so pulling the tag again picks the fix up.