Until the project reaches a stable release, security fixes are provided for the latest published minor version.

Do not open a public issue. Use GitHub's private vulnerability reporting feature in the repository's Security tab. If that is unavailable, email security@activlayer.com with a description, reproduction steps, affected versions, and potential impact.

We will acknowledge a complete report as soon as practical, investigate it, and coordinate a fix and disclosure. Please avoid accessing data that is not yours or disrupting services while testing.