Use GitHub's [private vulnerability reporting](../../security/advisories/new) on this repository — do not open public issues.
We will acknowledge within 5 business days and coordinate disclosure.
For bugs affecting multiple moss packages, file the advisory here on the package you installed. Maintainers will replicate the advisory on the originating package within 24h and link them via "references":
- --
The latest minor version is supported. See [moss releases](https://github.com/Symbiosis-Lab/moss-releases) for the matched moss app release.