Only the latest released version receives security fixes. Older versions are not patched; upgrade to the latest release to stay supported.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Older releases | No |
A generated project that maintains multiple release lines should replace this table with its actual support windows.
Report vulnerabilities privately through GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability.
Do not use public GitHub issues, pull requests, discussions, chat channels, or other public forums for vulnerability reports.
When reporting a vulnerability, include as much of the following as possible:
- affected version, commit, or deployment identifier
- a description of the issue and its security impact
- steps to reproduce or a minimal proof of concept
- any relevant logs, screenshots, or traces
- any suggested mitigations or fixes, if available
We aim to acknowledge a report within a few business days and will keep you updated as we investigate. Please give us a reasonable opportunity to release a fix before any public disclosure.