Security fixes are applied to the latest released alpha version and the main branch.
Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting flow for this repository and include:
- affected MA version and operating system
- provider/runtime involved, if relevant
- minimal reproduction steps
- impact assessment
- any proposed mitigation
We will acknowledge a report, assess it, and coordinate disclosure after a fix is available.