We currently provide security updates for the latest major version of Sift.

Please do not report security vulnerabilities through public GitHub issues.

If you discover a potential security vulnerability within Sift, please send an e-mail.

We will review your report, verify the vulnerability, and reply as soon as possible with a timeline for the fix. Once the fix is released, we will publicly acknowledge your contribution (if you wish).