Document supported release branches here.
Report vulnerabilities privately to the maintainers. Do not open public issues for active security vulnerabilities.
- Initial acknowledgement: within 48 hours
- Triage decision: within 5 business days
- Critical/High remediation: as fast as possible with release notes