Security Policy

Supported Versions

Security fixes are applied to the latest release line.

Reporting a Vulnerability

Use GitHub private vulnerability reporting when it is available for this repository. If it is not available, do not put exploit details in a public issue; open an issue requesting a private reporting channel instead.

When reporting, include the affected version, a minimal reproduction, impact, and any relevant DSH host assumptions. Do not include credentials, user data, or private deployment details.