Please report security issues privately to bugs@swi-prolog.org. Do not file public GitHub issues for vulnerabilities.

Include a description of the issue, steps to reproduce, the affected version (swipl --version), and the platform. We aim to acknowledge reports within a few working days and will coordinate disclosure once a fix is available.

Security fixes are applied to development branch and, if seemed serious enough, to the current stable release. Older releases are not maintained.