Security Policy

Supported versions

Security fixes are made against the latest released version of Alien::ngtcp2.

Reporting a vulnerability

Please do not open a public GitHub issue for a suspected vulnerability.

Report security issues privately using either:

• GitHub private vulnerability reporting: https://github.com/haxmeister/perl-Alien-ngtcp2/security/advisories/new
• Email: haxmeister@hotmail.com

Please include enough information to reproduce and understand the issue.

If the problem is ultimately in upstream ngtcp2 rather than Alien::ngtcp2, it may be referred to the ngtcp2 project after the issue has been evaluated.