Only the latest release receives security updates and bug fixes.

We take the security of tsql-scriptdom-java seriously. If you believe you have found a security vulnerability in this project, please follow these guidelines:

Please report vulnerabilities privately via GitHub's Advisory tab. This allows us to assess the issue, coordinate a fix, and publish an advisory without premature public disclosure.

If Private Vulnerability Reporting is unavailable, please reach out to the project maintainer directly via the contact information on their GitHub profile. Please do not report security vulnerabilities in public GitHub issues.

When reporting a vulnerability, please provide:

1. A clear description of the potential vulnerability.
2. Steps or sample T-SQL scripts required to reproduce the issue (e.g. potential Denial of Service, stack overflow in AST traversal, or malicious input handling).
3. The affected versions or commits.
4. Any potential mitigations or patch suggestions you may have.

• Initial Acknowledgement: Within 48 hours.
• Triage & Status Update: Within 7 business days.
• Resolution: Critical security issues will be patched and released with priority.