Security fixes target the current main branch and the latest published deployment. Older revisions are not maintained as separate release lines.

Do not open a public issue, discussion, or pull request for a suspected vulnerability. Use GitHub's private vulnerability reporting form:

https://github.com/jefahnierocks/dicee/security/advisories/new

Include the affected revision, impact, minimal reproduction, and any suggested mitigation. Do not include real user data, credentials, access tokens, or production database contents. Use synthetic test data in evidence.

You should receive an acknowledgement within seven days. Disclosure timing will be coordinated after impact is understood and a fix is available.