TimeNet is pre-1.0 and under active development. Security fixes land on the latest release and on main. Older versions are not maintained, so upgrade to the latest release to pick up fixes.

Please report security vulnerabilities privately. Do not open a public issue for them.

Use GitHub's private vulnerability reporting: open a draft advisory from the repository's Security tab. This reaches the maintainers without disclosing the issue publicly.

Include enough detail to reproduce the problem: the affected version, the steps, and the impact. We will acknowledge your report, investigate, and keep you posted on the fix and the disclosure timeline.