Security fixes are made to the latest release of the current major version.

Please do not open a public issue for a security problem.

Email security@minebit.dev with:

• a description of the problem and its impact
• the version of Bit's RPS, your Redis server version, and Java you are using
• steps to reproduce it, or a small proof of concept

We will acknowledge your report within 3 days and then work on a fix as quickly as we can. We cannot promise a date for the fix itself, but we will keep you updated. Please give us a reasonable chance to release a fix before you disclose the issue publicly.

When a fix is released, it is listed in the changelog, and you will be credited if you want to be.