Only the main branch is supported. Security fixes are made on main and included in the next release; they are generally not backported to older releases. Please check whether you can reproduce the issue on main before reporting.

Please do not report security vulnerabilities through public issues, discussions, or pull requests.

Instead, report them privately through GitHub: open the Security tab of this repository and click Report a vulnerability. If you cannot use GitHub, you can also send an email to me@crudolph.io.

Please include:

• A description of the issue and its potential impact
• The affected version or commit
• Steps or a minimal code example to reproduce the issue

This is a side project maintained in my spare time, so I cannot commit to a specific response time, but every report will be read and taken seriously. Once a fix is available, the issue will be disclosed via a GitHub Security Advisory, and reporters will be credited unless they prefer otherwise.