Only the latest release of each component is supported: the newest services-v*, web-v* and cli-v* tags. Older tags receive no security fixes; upgrade to the latest tag.

Please do not open a public issue. Report it through GitHub's private vulnerability reporting on this repository (Security tab, "Report a vulnerability").

You will get an acknowledgement within 5 working days. Include steps to reproduce, the affected component and version, and any impact you can establish.