Marksplice is currently a pre-v1 beta. Security fixes are provided for the latest published beta line only; older beta releases may require upgrading to receive a fix.

Do not disclose a suspected vulnerability in a public issue, discussion, pull request, or other public channel.

Use the public repository's Security tab and GitHub private vulnerability reporting to submit a private report. Include the affected Marksplice version, a minimal reproduction, impact, and any relevant environment details.

If GitHub private vulnerability reporting is temporarily unavailable, contact the maintainer through the GitHub account associated with this repository and request a private reporting channel without including vulnerability details in the public message.

Reports will be evaluated against the currently supported beta. Confirmed issues will be fixed in a new immutable module version; published Go module tags are never rewritten. Coordinated disclosure should wait until a fixed version is available unless there is a compelling safety reason to disclose sooner.