Please do not open a public issue for a potential vulnerability. Email security@boringcache.com or use GitHub private vulnerability reporting.

Include the affected version, expected impact, and enough reproduction detail for us to investigate. Do not include database credentials, private keys, backups, customer data, or production configuration.

Only the latest published release is supported. Security fixes are normally shipped in a new release rather than backported.

Reports about PostgreSQL authentication, replication, backup/restore, SSH host verification, secret handling, generated SQL, or release integrity are welcome.