We take security seriously and appreciate reports of any vulnerabilities.

Please use GitHub's Private Vulnerability Reporting feature to submit security issues. Alternatively, you may email yaroslav.riabtsev@rwth-aachen.de.

We aim to acknowledge reports within 5 business days. For confirmed critical issues, we target a fix or mitigation within 30 days when the affected maintenance branch remains supported.

Security fixes are applied to the active development branch and any maintained release branches when those exist.