Security fixes are made against the latest release on the default branch. There is no separate long-term-support branch.

Please do not open a public GitHub issue for security vulnerabilities.

1. Open the Security tab of this repository.
2. Choose "Report a vulnerability" to start a private advisory draft.
3. Include what you found, the affected file or version, a minimal reproduction, and the impact.

You can also email sunil.gentyala@ieee.org.

• Acknowledgement within a few days.
• If confirmed, a fix is prepared privately and released together with a published advisory that credits the reporter, unless you ask to stay anonymous.