Security fixes are prepared for the latest released version and the master branch.

Runtime compatibility follows the support policy in README.md:

• PostgreSQL major versions still supported by the PostgreSQL Global Development Group.
• The Go version declared in go.mod.

Older tags may receive security fixes when the maintainers decide the impact and upgrade cost justify a patch release.

Do not report suspected vulnerabilities in public GitHub issues.

Report vulnerabilities privately by email to security@belkacar.ru. If GitHub private vulnerability reporting is enabled for this repository, you may use that instead.

Include as much detail as possible:

• The affected pg-migration-storm --version output.
• PostgreSQL server major and minor version.
• Operating system and installation method.
• A description of the impact.
• Reproduction steps, proof of concept, logs, or SQL examples when safe to share.

The maintainers aim to acknowledge a valid report within 5 business days. After triage, we will coordinate a fix, prepare release notes, and publish an advisory when disclosure is appropriate.