The main branch is the only actively supported version of Proctor at this time. Security fixes are applied to main and released through the project's normal pull-request workflow.

Please do not report suspected vulnerabilities through a public GitHub issue, discussion, or pull request. Public disclosure can put users and deployments at risk before a fix is available.

Use GitHub's private vulnerability reporting feature for this repository when it is enabled. If private vulnerability reporting is unavailable, contact the repository maintainers privately through the contact details on the repository owner profile and include:

• a description of the vulnerability and its potential impact;
• the affected version or commit;
• clear steps to reproduce the issue; and
• any suggested mitigation or proof of concept that can be shared safely.

Please allow the maintainers reasonable time to investigate and prepare a fix before making any vulnerability details public.