Security updates are provided for the latest stable release only.

If you discover a security vulnerability, please do not open a public issue.

Please report it privately using GitHub's Report a vulnerability flow:

https://github.com/kirilinsky/dateforge-react-calendar/security/advisories/new

Include:

• A clear description of the issue
• Steps to reproduce
• Affected version
• Possible impact

I will try to acknowledge valid reports within 7 days.

If the vulnerability is confirmed, I will work on a fix and publish a security update as soon as reasonably possible. I aim to coordinate public disclosure within 90 days, or sooner if a fix is available and users have had reasonable time to upgrade.

Please allow reasonable time for investigation and fixing before public disclosure.