Please do NOT open a public GitHub issue for security vulnerabilities.
Instead, use GitHub's Private Vulnerability Reporting to submit your report confidentially. You will receive an acknowledgement within 48 hours and a detailed response within 7 business days.
| Version | Supported |
|---|---|
| 1.x | ✅ |
| < 1.0 | ❌ |
We follow coordinated disclosure. Fixes are released as patch versions, and advisories are published via GitHub Security Advisories after the patch is available.