Security fixes are provided for the main branch and the latest tagged release.
| Version | Supported |
|---|---|
Latest release (v* tag) |
Yes |
main |
Yes |
| Older releases | Best effort only |
Please do not open a public GitHub issue for security vulnerabilities.
Report privately to: andre.cs2i@gmail.com
Include:
- Affected component(s) and version(s)
- Steps to reproduce or a minimal proof of concept
- Impact assessment
- Any suggested fix
| Step | Target timeline |
|---|---|
| Acknowledgement | Within 5 business days |
| Initial assessment | Within 10 business days |
| Fix or mitigation plan | Depends on severity |
- Issues in dependencies already fixed in a newer release listed in
Directory.Packages.props - Missing features that are not demonstrated vulnerabilities