We follow semantic versioning. The following versions are currently being supported with security updates:

Please report suspected security vulnerabilities via email to the project maintainers. You will receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.

Please do not disclose security-related issues publicly until a fix has been announced.

We follow the principles of responsible disclosure.

We prefer all communications to be in English.