SecureZip is currently maintained as a single active release line.

For supported versions, we will review and address verified security vulnerabilities with a best-effort response.

Please use GitHub Private Vulnerability Reporting for this repository:

• Go to the repository's Security tab.
• Choose Report a vulnerability.
• Provide clear reproduction steps, impact, and any suggested mitigation.

If private reporting is unavailable, open a regular issue and share only non-sensitive details; maintainers may move discussion to a safer channel.

• Initial acknowledgment target: within 72 hours.
• Triage and severity assessment: as soon as possible, based on maintainer availability.
• Fixes are released as new patch versions on the supported release line.

Please do not publicly disclose exploit details until a fix or mitigation is available.