Please report vulnerabilities privately, through GitHub's private vulnerability reporting: https://github.com/cpp-best-practices/project_validator/security/advisories/new. Do not open a public issue for them.

Once a fix is released, the advisory is published with credit to you, unless you would rather not be named.

Fixes are made on main; there are no maintained older versions.