Security fixes are applied to the latest released version of paftacular.

Please report suspected vulnerabilities privately to Patrick Garrett at pgarrett@scripps.edu. Include a description, affected versions, reproduction steps, and the potential impact. Please do not open a public issue until a fix or disclosure plan has been agreed upon.

You should receive an acknowledgement within seven days. The maintainer will investigate, coordinate a release when necessary, and credit reporters who wish to be identified.