Security fixes are applied to the latest release only. Older releases are not patched.

Please report security vulnerabilities privately through GitHub's private vulnerability reporting rather than opening a public issue.

mach-math parses no external formats, so its input is the numbers a caller passes in. A defect that makes math crash on valid input, or read or write out of bounds, is a vulnerability and is welcome as a report.

Expect an acknowledgement within a few days. If the report is confirmed we will prepare a fix and coordinate disclosure with you. If it is declined we will explain why.