Report vulnerabilities privately to security@frontal.dev or through GitHub private vulnerability reporting. Include the affected SDK version, Python version, relevant module, reproduction steps, and impact. Do not include API keys or customer data.

The latest release is supported for security fixes. The SDK supports Python 3.9–3.12; security fixes are made on the latest release line. Users should upgrade to the latest frontal release to receive fixes. Older releases are not maintained separately.

Never commit populated .env files, credentials, or captured production payloads. Maintainers should acknowledge vulnerability reports within five business days and coordinate a fix and disclosure with the reporter.