Security fixes are provided for the latest released minor version while RepoCare is pre-1.0.

Please do not open a public issue for a suspected vulnerability. Use GitHub private vulnerability reporting on the repository's Security tab. Include affected versions, reproduction steps, impact, and any suggested mitigation.

Maintainers aim to acknowledge a report within five business days and will coordinate disclosure after a fix is available.