Until the first public preview is released, security fixes target the main branch. After release, the latest minor preview line is supported.

Please do not open a public issue for a suspected vulnerability.

Use GitHub private vulnerability reporting:

https://github.com/qtaghdi/boundra/security/advisories/new

Include affected versions, reproduction steps, impact, and any suggested mitigation. The project will acknowledge reports as soon as practical and will coordinate disclosure after a fix is available.