This project is under active development. Security fixes are applied to the latest maintained code on the default branch.

Please do open public GitHub issues for security vulnerabilities.

• A clear description of the issue
• Steps to reproduce or a proof of concept
• Potential impact
• Any suggested mitigation or fix, if available

You can expect an acknowledgment within 3 business days. We will aim to provide an initial assessment within 7 business days and keep you informed as the fix progresses.

When a report is confirmed, we will work on a fix and coordinate disclosure in a way that protects users of the project.