Security fixes are applied to the latest published version of next-query-sync.

Please do not disclose a suspected vulnerability in a public GitHub issue before the maintainer has had a reasonable opportunity to investigate it.

Use GitHub's private vulnerability reporting feature for this repository when available. If private reporting is unavailable, contact the maintainer through the repository owner's GitHub profile and request a private channel for the report.

A useful report includes:

• affected version or commit;
• minimal reproduction steps;
• expected and observed behavior;
• potential impact;
• any suggested mitigation.

Reports will be triaged as quickly as practical. Confirmed vulnerabilities will receive a fix and release notes appropriate to their severity.