OSO is continuously deployed from the main branch, which means we accept security vulnerabilities anywhere in the monorepo.

For supported versions of pyoso:

As a public good, we rely on the community to help safely disclose vulnerabilities.

You can report vulnerabilities directly in the "Security" tab on our GitHub repo.

We will try to respond to all reports ASAP. If you need to reach us sooner, please find us on our Discord.