Swarm is currently in the 0.x release series. Security fixes are applied to the latest release and the main branch. Older releases are not maintained.
| Version | Supported |
|---|---|
| Latest release | Yes |
main |
Yes |
| Older releases | No |
Use GitHub's private vulnerability reporting feature in the repository Security tab. Do not open a public issue for an undisclosed vulnerability.
Include the affected component and version, reproduction steps or a proof of concept, the expected impact, and any suggested remediation. Remove credentials, private keys, production data, and other secrets from the report.
A maintainer will acknowledge the report, assess its severity, and coordinate remediation and disclosure through the private advisory. If the report is not accepted, the maintainer will explain why in the advisory.