Security Policy

Reporting a Vulnerability

If you discover a security issue, please report it privately instead of opening a public GitHub issue.

• Email: lfc191910@gmail.com
• Subject: dompdf.js security report

Please include:

• a clear description of the issue
• impact assessment
• reproduction steps or proof of concept
• affected versions or commit range, if known

We will acknowledge the report as soon as possible and coordinate on remediation and disclosure timing.

Supported Versions

At this stage, security fixes are handled on the latest active branch only.