Only the latest release receives security fixes. We recommend always using the most recent version.

Please do not open a public GitHub issue for security vulnerabilities.

Report security issues privately via GitHub's built-in Security Advisories feature (Security → Advisories → New draft advisory).

Include as much of the following as you can:

• A description of the vulnerability and its potential impact
• Steps to reproduce (code snippet, if applicable)
• The version of aoni and Go you are using
• Any relevant environment details (OS, proxy setup, etc.)

We will acknowledge receipt within 72 hours and aim to release a fix within 14 days for confirmed critical issues.