For information on how to report a new security problem please see here. Our existing security advisories are published here.

What the project treats as in scope and out of scope, the security properties it provides and disclaims, the adversary model, and how findings are triaged are documented in THREAT-MODEL.md.