Security Policy

Report vulnerabilities privately to maintainers. Avoid filing public issues for undisclosed vulnerabilities.

We aim to patch critical issues quickly and issue a security release with notes.