interlock follows semantic versioning. Security fixes target the latest released minor of the current major.

Please do not open a public issue for security problems.

Report privately through GitHub's private vulnerability reporting, or by email to galushko355@gmail.com. Include a description, affected versions, and a reproduction if you have one.

You can expect an acknowledgement within a few days. Once a fix is ready we will release it and credit the reporter unless you prefer to stay anonymous.