Security Policy

Supported Versions

This project provides security updates for releases running on Node.js 20 and newer.

If there is a major security flaw and you are dependent on an older version, we might be willing to provide a backported fix on a case-by-case basis.

If you discover a security issue, please report it responsibly by sending an email to: mail@tin-sever.de.

Please do not open a public issue for security vulnerabilities.

Expect a response within a few business days. We will coordinate a fix and public disclosure with you.