Security fixes are backported to the latest minor release of the current major version and the latest minor release of the immediately preceding major version. Older major/minor streams do not receive security patches.

If you think you have found a security vulnerability in springdoc-openapi please DO NOT disclose it publicly until we've had a chance to fix it. Please don't report security vulnerabilities using GitHub issues, instead head over to support@springdoc.org and learn how to disclose them responsibly.

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.