Report security vulnerabilities privately via GitHub's private vulnerability reporting: the repository's Security tab -> Report a vulnerability (https://github.com/mmarmol/durin/security/advisories/new). Please do not open a public issue for security reports.

We aim to acknowledge reports within a few days and will coordinate disclosure once a fix is available.

durin is pre-1.0. Security fixes target the latest release of durin-agent on PyPI.