Security fixes are applied to the latest release on the master branch. Older releases are not supported.

Please do not report security vulnerabilities through public GitHub issues.

Use GitHub private vulnerability reporting at https://github.com/Quad4-Software/rss-discovery/security/advisories/new to report a vulnerability privately.

Include a description of the issue, steps to reproduce, and the potential impact. You should receive an acknowledgement within a few days. If the report is accepted, a fix will be developed and released before public disclosure, coordinated with the reporter.