We release patches for security vulnerabilities in the following versions:

If you discover a security vulnerability, please:

1. DO NOT create a public GitHub issue
2. Email us at: [email protected]
3. Include detailed information about the vulnerability
4. Allow us reasonable time to address the issue before public disclosure

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact assessment
• Any proof-of-concept code (if applicable)

When using this project:

• Keep dependencies up to date
• Use the latest supported version
• Follow secure coding practices
• Regularly audit your implementation

Please see here