Security fixes are provided for the latest state of the main branch.
| Version | Supported |
|---|---|
main |
Yes |
| Older branches/tags | No |
Please report suspected vulnerabilities through GitHub's private advisory channel:
Do not open public issues for security-sensitive reports.
When filing a report, include:
- A clear description of the issue and impact.
- Reproduction steps or a minimal proof of concept.
- Affected versions/commit hashes.
- Any suggested remediation, if available.
Maintainers will aim to:
- Acknowledge new reports within 3 business days.
- Provide a status update or triage decision within 10 business days.
- Coordinate remediation and disclosure timing with the reporter.