Supported versions are listed in each repository (releases/tags). In general, only the latest release receives security fixes.

Please do not open public issues for security reports.

• Open a private security advisory in the affected repository (Security → Advisories → Report a vulnerability), or
• contact the maintainers privately through GitHub.

Include as much detail as you can: affected version, steps to reproduce, and potential impact. We aim to acknowledge reports within a few days and to coordinate disclosure with you.

Thanks for helping us keep Arborae projects safe 🌱