Snapback is pre-release software. Until 1.0.0 ships, only the latest release receives security fixes.

Please do not open a public issue for a security problem.

Report it through GitHub private vulnerability reporting instead: https://github.com/adeelahmad/snapback/security/advisories/new

If you cannot use GitHub, email adeel [at] adeelahmad.net instead.

Include the affected version, your platform, steps to reproduce, and the impact you observed. You will get an acknowledgement within 7 days. We will keep you updated while a fix is prepared and credit you in the advisory unless you ask us not to.