We will always apply vulnerability fixes on branch develop and include them
in the next release. Depending on the severity, we will consider hotfixing
the most recent release too. Older releases will not be hotfixed.
| Version | Supported |
|---|---|
branch develop |
✅ |
| latest release | ❓ |
| older releases | ❌ |
To report a vulnerability privately please email [email protected]
We will try to confirm or decline your report ASAP by email. For accepted vulnerability reports we will create an advisory and, if you wish, invite you to the discussion.