Security fixes are backported only to the most recent minor version line.

If you discover a security issue in TechCouncil, please report it privately.

1. Do not open a public GitHub issue for security reports.
2. Use GitHub's private vulnerability reporting feature on this repository: open the "Security" tab and follow the prompts under "Report a vulnerability." That submission is visible only to maintainers.
3. Alternative: email ojesusmp@gmail.com.

• A clear description of the issue and its impact.
• Steps to reproduce, or a minimal proof of concept.
• The affected version(s).
• Any mitigating factors or workarounds you have identified.

• Acknowledgment within 7 days.
• An initial assessment and proposed remediation timeline within 14 days.
• A fix released as a patch version, with a corresponding CHANGELOG entry crediting the reporter (if they wish to be credited).

None at this time.