Security

SECURITY.md

Security Policy

Supported Versions

Only the latest main branch and latest tagged release (if any) are supported for security fixes.

Reporting a Vulnerability

Please do not disclose vulnerabilities publicly.

Report privately with:

A clear description of the issue
Steps to reproduce
Impact assessment
A suggested fix (if available)

Handling

We aim to:

Acknowledge receipt
Validate and assess severity
Patch and release
Credit reporters when appropriate

There aren’t any published security advisories