Numera is pre-1.0. Security fixes land on the latest commit on main; older revisions are not back-patched.

Please do not report security vulnerabilities in a public issue. Report them privately through GitHub Security Advisories.

We will acknowledge the report, investigate it, provide a remediation timeline, and coordinate disclosure after a fix is available.