Only the latest minor release receives security fixes. Older minor versions are not patched.

Please do not open a public GitHub issue for security vulnerabilities.

Use GitHub Private Vulnerability Reporting to report issues confidentially:

1. Go to the repository's Security tab: https://github.com/nightwing-us/mcpyida/security
2. Click "Report a vulnerability".
3. Fill in the details and submit.

Your report is visible only to repository maintainers until a fix is published.

We aim to acknowledge all reports within 5 business days. Complex vulnerabilities may take longer to investigate and patch; we will communicate status updates through the private advisory thread.

We follow coordinated disclosure:

1. The maintainer acknowledges the report.
2. A fix is developed and tested privately.
3. A patched release is published.
4. A public advisory is issued (GitHub Security Advisory) after the fix is available, giving users time to upgrade.

We ask reporters to keep vulnerability details private until the advisory is published. We will credit reporters in the advisory unless they prefer to remain anonymous.