Security Policy

Supported versions

Security fixes are applied to the latest development branch and the latest published release line when feasible.

Reporting a vulnerability

Please use GitHub's private vulnerability reporting for this repository.

If private reporting is not available, contact the maintainers through a private channel and include:

• a short description of the issue
• affected versions
• a minimal proof of concept
• any suggested mitigation

Please do not open public issues for security vulnerabilities before a fix is available.