Security fixes are made for the latest released version of DatagramTunneler. Please upgrade before reporting an issue whenever practical.

Please do not report security vulnerabilities in public GitHub issues or discussions.

Use GitHub's private vulnerability-reporting feature from this repository's Security tab and include:

• the affected release and operating system;
• a clear description of the impact;
• steps or a minimal proof of concept to reproduce the issue; and
• any mitigations you know of.

We aim to acknowledge reports within seven calendar days, investigate them privately, and coordinate a fix and disclosure timeline with the reporter.

If GitHub's private reporting option is unavailable, do not publish the details. Contact the repository owner privately through the contact method listed on their GitHub profile and ask for a secure reporting channel.

Please report vulnerabilities in the DatagramTunneler source code, official release artifacts, and the official Homebrew tap. Third-party builds and deployments may have their own reporting processes.