Security fixes are released for the latest two minor versions.
For example, if 0.1.x, 0.2.x, and 0.3.x have been released,
security patches land on 0.2.x and 0.3.x; 0.1.x no longer
receives updates.
| Version | Supported |
|---|---|
| Latest minor | ✅ |
| Previous minor | ✅ |
| Older | ❌ |
Check the releases page for the current latest versions.
Please do not open a public GitHub issue for suspected security problems.
File a private advisory via GitHub's private vulnerability reporting.
Please include:
- A description of the issue and its impact.
- Steps to reproduce or a minimal proof of concept.
- The affected version(s) or commit SHA.
You should expect an acknowledgement within a few business days. Disclosure is coordinated with you before any fix or advisory is published.