remo is developed as a rolling release; only the latest published version on the main branch (and the most recent tagged release) receives security fixes.

Please do not report security vulnerabilities through public GitHub issues.

Instead, use GitHub's private vulnerability reporting:

1. Go to the Security tab of this repository.
2. Click Report a vulnerability to open a private advisory.

Please include:

• A description of the vulnerability and its impact.
• Steps to reproduce, or a proof of concept.
• The affected version(s) and, if known, any suggested remediation.

You can expect an initial acknowledgement within a few days. We will keep you informed as we work on a fix and will coordinate disclosure with you once a patch is available.