The latest release line is supported for security updates.
| Version | Supported |
|---|---|
Latest 1.x |
Yes |
Older 1.x |
Best effort |
0.x |
No |
Please do not open public issues for security vulnerabilities.
Use GitHub private vulnerability reporting:
Include:
- A clear description of the issue
- Reproduction steps or proof of concept
- Impact assessment
- Suggested mitigation (if available)
- Initial acknowledgment: within 3 business days
- Triage decision: within 7 business days
- Fix and coordinated disclosure: depends on severity and complexity