Retsu is under active development. Security fixes are applied to the latest release and the main branch.

Please do not report suspected vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting:

1. Open the repository's Security tab.
2. Select Advisories.
3. Select Report a vulnerability.

Include the affected version or commit, the potential impact, reproduction steps or a proof of concept, and any suggested remediation. Maintainers will coordinate disclosure and remediation with the reporter through the private advisory.