Security fixes are made for the latest release of each project. If you are on an older version, the fix will be in a new release and the upgrade notes will say if anything changes for you.

Please report vulnerabilities privately, not in a public issue, pull request or discussion.

1. Preferred: open the repository's Security tab and choose Report a vulnerability (how private reporting works).
2. Or email muhittincamdali@gmail.com with "Security" in the subject.

Include what you can of the following:

• the affected repository and version (tag or commit),
• what an attacker can do and under which conditions,
• steps or a small project that reproduces it,
• any fix or mitigation you already have in mind.

• You get a reply within 7 days confirming that the report arrived.
• I confirm the issue, work on a fix and agree a disclosure date with you. Fixes are released as soon as they are ready, together with a GitHub security advisory.
• You are credited in the advisory unless you prefer not to be.

Please give a reasonable amount of time to fix the issue before disclosing it publicly.