Please report any security issue to security@devolutions.net. You can find more details about our security policy on https://devolutions.net/security/.
Please wait for our reply before opening a public issue or pull request for a vulnerability. After triage, we let you know how the fix will be handled:
- Low-impact issues (crashes, panics, denial of service) are fixed through regular public pull requests with neutral commit messages.
- Higher-impact issues are fixed privately by the maintainers.
When an issue warrants it, we publish an advisory and a CVE once a fixed release is available.