Omuzaki is in early development and has no releases. No version is supported yet, and there is no security patch process beyond fixing main. When we make a first release, this file will say which versions get fixes.

Please do not open a public issue, discussion or pull request for a vulnerability.

Report it privately in one of two ways:

1. Use GitHub private vulnerability reporting: the "Report a vulnerability" button on the Security tab of the repository.
2. Email security@dazsel.com.

Please include what is affected (crate, file or feature), the steps to reproduce, the impact you see, and the commit you tested. We will acknowledge your report, keep you informed as we investigate, and credit you when the fix is public if you want that. Please give us a reasonable time to fix the problem before you disclose it.

Reports about the third-party dependencies we use are welcome too, but the right place for a flaw in a dependency is usually that project.