We release patches for security vulnerabilities on a regular cadence. Which versions are eligible for receiving such patches can be found below:
| Version | Supported |
|---|---|
| latest | ✅ |
Please do NOT raise a GitHub Issue to report a security vulnerability. Please report (suspected) security vulnerabilities to [email protected], preferably with a proof of concept. You will receive a response from us within 24 hours. If the issue is confirmed, we will release a patch as quickly as possible depending on complexity but historically within a few days.
Non-vulnerability-related security issues such as new ideas for security features are welcome on GitHub Issues.