Security fixes are made for the latest release of shush. Please upgrade before reporting.

Please do not open a public issue for security problems.

Report it privately through GitHub: open a security advisory. Include what you found, how to reproduce it and what impact you expect.

You can expect an acknowledgement within a few days. Once the issue is confirmed, a fix is released and the advisory is published with credit to you, unless you prefer to stay anonymous.