Only the latest release receives security updates.

Please do not open a public GitHub issue for security reports.

Email security@cloudandsre.com with:

• a description of the issue
• a minimal reproducer
• the version(s) affected
• your assessment of severity

I aim to acknowledge within 72 hours and to ship a fix or mitigation within 14 days for confirmed issues. Coordinated public disclosure once a fix is available.