Only the latest published release receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Use GitHub's private vulnerability reporting instead:

1. Go to the Security tab of this repository
2. Click Report a vulnerability
3. Fill in the details and submit

You should receive an acknowledgement within 5 business days. If you do not hear back, email security@topsort.com.

• A description of the vulnerability and its potential impact
• Steps to reproduce or a minimal proof-of-concept
• Affected versions (if known)
• Any suggested mitigations

We will coordinate a fix and disclosure timeline with you.