If you discover a security vulnerability in this project, please report it responsibly.
Use GitHub private vulnerability reporting: go to the Security Advisories page of this repository and click "Report a vulnerability". Do not open a public issue.
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
| Action | Timeframe |
|---|---|
| Acknowledgment | 2 business days |
| Status update | 5 business days |
| Fix (critical) | Best effort, prioritized |
Only the latest release is actively supported with security patches.
We follow coordinated disclosure. Please do not publicly disclose vulnerabilities until a fix has been released.