Wire Lang is pre-1.0 software. Security fixes are provided for the latest commit on main and for the latest published package versions once packages are released.

Please report suspected vulnerabilities privately through GitHub's private vulnerability reporting flow:

https://github.com/eduardozf/wire-lang/security/advisories/new

Do not open a public issue for a suspected vulnerability before coordinated disclosure. Include the affected version or commit, reproduction steps, impact, and any relevant logs or files. The maintainer will triage the report, discuss a fix privately, and publish an advisory or release note when disclosure is appropriate.