Security fixes are considered for the **latest released** versions of this project (Rust crate on [crates.io](https://crates.io/crates/rust-data-processing) and Python package on [PyPI](https://pypi.org/project/rust-data-processing/) when published). Older releases may not receive backports unless agreed by maintainers.
**Please do not open a public GitHub issue for security reports.**
Instead, email maintainers privately or use [GitHub private vulnerability reporting](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability) for this repository if it is enabled.
Include:
- ---
We aim to acknowledge receipt within a few business days; timelines for fixes depend on severity and complexity.
After a fix is available, we may publish a security advisory or release notes describing the issue in line with responsible disclosure.