Only the latest minor release line receives security updates. Please upgrade before reporting an issue on an older version.
| Version | Supported |
|---|---|
| 8.3.x | ✅ |
| < 8.3 | ❌ |
Do not open a public issue for security vulnerabilities.
Report privately through GitHub Security Advisories:
If you cannot use the advisory flow, email the maintainer directly:
Please include:
- A description of the vulnerability and its impact
- Steps to reproduce or a proof of concept
- Affected version(s) and module(s)
- Any suggested fix or mitigation
- A fix or mitigation plan communicated once the report is validated.
- Public disclosure coordinated with you after a patch is released.
Please act in good faith — give us reasonable time to fix the issue before any public disclosure, and avoid privacy violations, data destruction, or service disruption during testing.