Only the latest release receives security updates.
| Version | Supported |
|---|---|
| latest | Yes |
| < latest | No |
Do not open a public issue for security vulnerabilities. Use the repository's private vulnerability report so maintainers can investigate and coordinate disclosure without exposing the report.
- Acknowledgment: within 48 hours
- Initial assessment: within 1 week
- Fix timeline: within 90 days of confirmation
We will coordinate disclosure with you. Credit is given to reporters unless they prefer to remain anonymous.