Email security@openloc.com with the details. Please don't open a public issue or pull request for a security problem.

Only the latest release gets security fixes. Older releases should upgrade.

We read every report. A fix lands on the main branch of the public repository; we don't promise a release date. We don't give public credit to reporters.

More about how OpenLoc handles security: https://openloc.com/security