Only the latest release of objx receives security fixes. Please make sure you are on the most recent version before reporting an issue.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them privately using GitHub's private vulnerability reporting.

Please include as much of the following as you can:

• A description of the issue and its impact
• The affected version(s) of objx
• Steps to reproduce, ideally a minimal Go program or test case
• Any known workarounds or suggested fixes

We will acknowledge your report as soon as we can, keep you informed of our progress, and credit you in the advisory once a fix is released, unless you prefer to remain anonymous.