Redax is pre-1.0. Security fixes are best-effort and are made against the latest development line. Please upgrade before reporting an issue when possible.

Please do not file a public issue. Use GitHub's private vulnerability reporting for this repository.

Include the affected commit or release, deployment mode, reproduction steps, impact, and whether any sensitive data was exposed. Do not include real PII in the report; use synthetic examples and redact logs or screenshots.

We will acknowledge and triage reports as capacity allows. Fix timing depends on severity, exploitability, and the availability of a safe patch.

Thank you for helping keep redax and its users safe.