Security updates are provided for the latest release line.

If you use an older version, please concider updating. We are not responsible for any security vulnerability that happens on unsupported versions.

Please do not open public issues for security vulnerabilities. Report security issues privately by emailing the maintainer at security@szabee.me, or by using GitHub private vulnerability reporting.

When reporting, include:

• A clear description of the issue
• Reproduction steps and server/plugin versions
• Potential impact
• Any proof-of-concept details

You can expect an initial acknowledgement within 3 days.