mediary is pre-1.0. Security fixes are released for the latest minor version only.

Please do not open a public issue. Report it privately through GitHub private vulnerability reporting.

Include what you found, how to reproduce it, and the affected versions. You can expect an acknowledgement within 7 days. Once a fix is released, we publish a GitHub Security Advisory crediting you, unless you prefer to stay anonymous.