Unless a repository states otherwise, security updates target its default branch and latest documented release. Older releases may no longer receive security updates.

Email tondrey@wovensolutions.com. Do not open a public issue or discussion for a suspected vulnerability.

Please include:

• the affected repository, version, or commit;
• a description of the issue and its potential impact;
• steps to reproduce or a minimal proof of concept; and
• any known mitigations or workarounds.

Do not include credentials, personal data, or other third-party secrets. We will acknowledge the report and coordinate validation, remediation, and disclosure with you.

Act in good faith, avoid privacy violations and service disruption, and test only systems and data you are authorized to use. Allow a reasonable remediation period before public disclosure.