Security fixes go into the latest release on crates.io (currently 0.9.x).
GitHub issues are disabled for this repository. Report a vulnerability privately through GitHub instead: Security → Report a vulnerability.
Please include:
- the
libsvm-rsversion or commit, - the model file, problem file, or serde payload that triggers the problem,
- the command or API call you ran, and what happened.
The loaders treat model files, problem files, and serde payloads as untrusted
input. .oss-scanner/threat_model.md lists the
attack surface and how severity is rated.
SECURITY_AUDIT.md lists earlier findings and their fixes.