Only 2.0.0 and later receive security fixes. Versions before 2.0.0, including the 1.19.0+ releases that previously addressed an earlier vulnerability, are no longer supported — upgrade to 2.0.0 or later before relying on this project in production.
| Version | Supported |
|---|---|
| >= 2.0.0 | ✅ |
| < 2.0.0 | ❌ |
Please report security vulnerabilities privately rather than opening a public GitHub issue.
- Preferred: use GitHub's private vulnerability reporting for this repository.
- Alternative: email payam.nj@gmail.com with details and, if possible, steps to reproduce.
We'll acknowledge your report and let you know whether it's accepted or declined, along with the reasoning if it's declined. If accepted, we'll work on a fix and release a patched version, and are happy to credit you in the writeup if you'd like. We'd appreciate keeping the report private until a fix is released.