Only the latest tagged release is supported with security fixes.

Please do not report security vulnerabilities in public issues.

Use GitHub private vulnerability reporting:

• https://github.com/exc-works/decimal/security/advisories/new

If private reporting is unavailable in your environment, contact repository maintainers through a private channel and include:

1. Affected version(s)
2. Reproduction steps or proof of concept
3. Impact assessment
4. Suggested mitigation (if available)

• Initial acknowledgment target: within 3 business days
• Status update target: every 7 business days until resolution