Security fixes are prioritized for the latest code on the default branch.
| Version | Supported |
|---|---|
main |
Yes |
| older releases | Best effort |
Please do not open public issues for security vulnerabilities.
Report privately through GitHub Security Advisories:
Include:
- A clear description of the issue
- Steps to reproduce (proof of concept if possible)
- Affected files, crates, or commands
- Impact assessment
- Suggested fix (if you have one)
Maintainers aim to send an initial response within 5 business days.
After a fix is available, maintainers may publish a security advisory with credits, impact, and remediation details.