Please do not open a public issue or pull request for a potential security vulnerability.

Email security@boringcache.com or use GitHub's private vulnerability reporting in the affected BoringCache repository when it is available. The complete reporting policy and testing boundaries are at boringcache.com/security.

Include the affected product, repository, version or page, expected impact, and enough reproduction detail for us to investigate. Do not include live credentials, customer data, or secrets.

The latest published release of each maintained BoringCache distribution is supported. Security fixes are normally shipped as new releases rather than backported to every older version.