Security

SECURITY.md

Security Policy

Reporting Vulnerabilities

Open a GitHub Security Advisory on the affected repository.

Include:

Description of the vulnerability
Steps to reproduce
Affected version(s)

Do not open public issues for security vulnerabilities.

Response

Acknowledgment: Within 48 hours
Assessment: Within 7 days
Fix: Based on severity (critical = days, high = weeks, lower = next release)

Supported Versions

Only the latest track is supported. Older tracks may receive critical fixes at maintainer discretion.

There aren’t any published security advisories