Security fixes target the latest release.

Please report vulnerabilities privately to hello@asterisk.coop with [rumi security] in the subject. Include the Rumi version, platform, impact, and a reproducer or sample when possible.

Malformed files, external headers, or OpenZL frames that cause crashes, invalid memory access, hangs, silent data corruption, or excessive resource use are security issues.

We will coordinate any fix and disclosure with the reporter.