Security fixes are applied to the latest published version of almanac-md.
Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for thebytefarm/almanac and include:
- The affected version
- Reproduction steps or a proof of concept
- The expected impact
- Any known mitigations
The maintainers will acknowledge the report within seven days and keep the advisory updated as the report is investigated.