Security fixes are released for the latest minor version of the current major version of shad.

Do not open a public issue for a security problem. Use GitHub's private vulnerability reporting instead: https://github.com/serverpod/shad/security/advisories/new.

Include the affected version, a description of the problem, and steps to reproduce it. We acknowledge reports within three working days and keep you informed until a fix is released.