Security fixes are made against the latest released version of Whodis.

Please use GitHub's private vulnerability reporting. Do not open a public issue for a vulnerability that could put users at risk.

Include the affected version and platform, reproduction steps, expected impact, and any suggested mitigation. Avoid including real registry credentials, TSIG secrets, API tokens, or private domain data. A report will be acknowledged as soon as practical, and disclosure will be coordinated after a fix is available.

Ordinary bugs, malformed public responses, and false-positive diagnostic findings can use the public issue tracker when they do not expose sensitive information.