Security fixes are prioritized for the latest release line.
| Version | Supported |
|---|---|
| 1.4.x (latest) | Yes |
| older versions | No |
Please do not open public issues for vulnerabilities.
Report privately via email:
Include:
- A clear description of the issue
- Reproduction steps or proof of concept
- Impact assessment
- Affected version/commit if known
- Initial response: within 72 hours
- Triage decision: within 7 days
- Fix timeline: depends on severity and complexity
After a fix is available, responsible disclosure details may be shared in release notes.