Security updates are provided for the latest stable release of this project. Older versions may not receive security fixes. Users are encouraged to keep their installations up to date.
If you discover a security vulnerability, please report it responsibly.
Do not open a public GitHub issue to report security vulnerabilities.
Instead, use GitHub's private vulnerability reporting feature:
- Navigate to the repository's Security tab.
- Open Advisories.
- Click Report a vulnerability.
When reporting a vulnerability, please include:
- A description of the vulnerability.
- Steps to reproduce the issue.
- The potential security impact.
- Affected versions and platforms.
- Any relevant logs or proof of concept.
Security reports will be reviewed as soon as reasonably possible. If a vulnerability is confirmed, we will work toward a fix and coordinate disclosure as appropriate. Please avoid publicly disclosing the vulnerability until a fix is available or disclosure has been coordinated with the maintainers.
Security fixes will generally be distributed through new releases. Users are encouraged to update to the latest stable version to receive security improvements.