Report a vulnerability in private, through **Report a vulnerability** on the
[Security tab](https://github.com/linouxis9/oxirush-utils/security) of the
repository. Please do not open a public issue for it.
Say what the input is and what happens: the octets, the text, the tree or the
path, and the version or the commit of the crate. Input that makes a reader or
a path panic, loop or allocate without bound is a vulnerability, and so is an
identity that is written as octets which its reader gives another value for.
The latest version on crates.io receives the fixes.