Please report a vulnerability privately to Dongfang Zhao dzhao@cs.washington.edu instead of opening a public issue. Include the affected version, a description, and a way to reproduce it. You will receive an acknowledgment within five working days, and the fix will be released together with a note in CHANGELOG.md.

Only the latest release receives security fixes.

An incorrect search result (a returned vector that is not among the exact k nearest neighbors) is treated as a correctness bug of the highest priority; report it as an issue with a reproducing script.