| Version | Supported |
|---|---|
| The latest minor release | ✅ fixes ship as its next patch, or as the next minor |
| Older releases | ❌ upgrade to the latest release first |
The library, the command line and the container image share one version number, so a fix reaches all three in the same release.
Please do not report security vulnerabilities via public GitHub Issues.
Report it privately through GitHub, by opening a draft security advisory, or send an email to shalaevad.alexey@gmail.com. Either way, include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact and affected versions
We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.
Once the fix is released, we will credit you in the release notes unless you prefer to remain anonymous.