Please report any security issue to security@devolutions.net. You can find more details about our security policy on https://devolutions.net/security/.

Please wait for our reply before opening a public issue or pull request for a vulnerability. After triage, we let you know how the fix will be handled:

• Low-impact issues (crashes, panics, denial of service) are fixed through regular public pull requests with neutral commit messages.
• Higher-impact issues are fixed privately by the maintainers.

When an issue warrants it, we publish an advisory and a CVE once a fixed release is available.