We apply security fixes only to the latest released version of Elmo. If you are running an older version, please upgrade before reporting an issue.

Please do not open a public GitHub issue for security vulnerabilities.

Email security@elmohq.com with:

• A description of the issue and its impact
• Steps to reproduce (proof-of-concept code is helpful)
• The version or commit you tested against
• Your name or handle if you'd like to be credited in the disclosure

Please give us a reasonable amount of time to investigate and release a fix before any public disclosure.