Unless a repository states otherwise, security fixes target its default branch and latest released version. Older versions may require upgrading.

Do not disclose suspected vulnerabilities in a public issue, discussion, or pull request.

Use Security → Report a vulnerability in the affected repository when that option is available. Otherwise, email biuro@silesiansolutions.com with:

• the affected repository and version or commit;
• a description of the issue and its potential impact;
• reproducible steps or a minimal proof of concept;
• any known mitigations.

Do not include real customer data or unnecessary secrets. We will confirm receipt, investigate the report, and coordinate disclosure with you.