CNC applies security fixes as far back as reasonably possible.

We encourage responsible disclosure practices for security vulnerabilities. Please contact [email protected] to report a security concern before opening a PR or Issue which will be publicly visible.