Cadder has not reached 1.0.0 yet. Security fixes are made on master until the project starts publishing stable release lines.

Please do not open a public issue for a suspected vulnerability.

Use GitHub private vulnerability reporting when it is available for this repository. If that is not available, contact the repository owner through GitHub and include:

• a short description of the issue;
• affected platforms;
• steps to reproduce;
• expected impact;
• any logs or proof-of-concept material that are safe to share privately.

We will acknowledge valid reports as soon as possible and coordinate a fix before public disclosure.