Only the latest release receives security fixes.

Please do not open a public issue for security problems.

Use GitHub's private reporting instead: Security → Report a vulnerability on this repository.

This is a small project maintained by one person in their spare time, who is often travelling. Please allow up to a month for a first reply. A fix is released as soon as reasonably possible after that. There is no bug bounty.

Reports are welcome in English or German.