A recent change (1.8) in [cebe/openapi](https://github.com/cebe/php-openapi/pull/225) changed the security property from an array to a single value/class That change breaks https://github.com/thephpleague/openapi-psr7-validator/openapi-psr7-validator/blob/a665e220d0bba68411efc1899ed5022fd9b10113/src/PSR7/SpecFinder.php#L150-L163 when returning the defaults. I have a patch (not sure if the final solution? but works) in place. Pull request coming