Only the latest released version of the piece of software is supported.

If you found a high severity security vulnerability, please report it by email to security@emersion.fr. High severity vulnerabilities compromise confidentiality, integrity or availability of resources, and are performed remotely in a realistic configuration. Such vulnerabilities include remote arbitrary code execution or denial of service.

Other security vulnerabilities should be reported on the public issue tracker like a regular bug.

Please bear in mind, the maintainer is a volunteer. When receiving a private security vulnerability report, the maintainer may request the vulnerability to be reported in public instead (e.g. if severity is disputed, if help from the rest of the community is required, or due to lack of time/interest).

The maintainer doesn't participate in the CVE system.