Only the latest release receives security fixes.

To report a security vulnerability, please use one of the following methods:

• Preferred: GitHub Security Advisories
• Email: security@savvyweb.systems

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

• Acknowledgement: Within 72 hours of receipt
• Initial assessment: Within 1 week
• Resolution: Dependent on severity and complexity

We appreciate responsible disclosure and will credit reporters in release notes unless anonymity is requested.