dan is developed as a rolling release. Only the latest published release receives security fixes.

Please report security vulnerabilities privately — do not open a public issue for a suspected vulnerability.

• Preferred: use GitHub's private vulnerability reporting ("Report a vulnerability" under the repository's Security tab).
• Alternatively, email dfallman@gmail.com.

Please include enough detail to reproduce the issue (affected version, platform, steps, and expected vs. actual behavior). You can expect an initial response within a few days. Once a fix is available it will be released and the advisory published.