Security fixes are prioritized for the latest main branch and the most recent release tag.

Please do not open public issues for suspected vulnerabilities.

Preferred path:

• Create a private GitHub Security Advisory: https://github.com/jakerslam/pqts/security/advisories/new

Include:

• affected files/components
• reproduction steps
• impact assessment
• suggested mitigation (if known)

• Initial acknowledgement: within 72 hours
• Triage decision: within 7 days
• Patch/release target: depends on severity and exploitability