SECURITY.md

Only the latest version of GitPython can receive security updates. If a vulnerability is discovered, a fix can be issued in a new release.

Please report private portions of a vulnerability tohttps://github.com/gitpython-developers/GitPython/security/advisories/new. Doing so helps to receive updates and collaborate on the matter, without disclosing it publicly right away.

Vulnerabilities in GitPython's dependenciesgitdb orsmmap, which primarily exist to support GitPython, can be reported here as well, at that same link. The affected package (GitPython,gitdb, orsmmap) can be included in the report, if known.