Security fixes are provided for the latest released version of actupdate. The main branch contains ongoing development and may include unreleased fixes.

Please do not report security vulnerabilities through public GitHub issues. Instead, use the repository's private vulnerability reporting to report the issue and include enough detail to reproduce and assess it.

You can expect an initial response within seven days. If the report is accepted, updates will be shared through the private advisory until a fix and coordinated disclosure are ready.