The following list describes whether a version is eligible or not for security updates.

If you discover a security vulnerability, please report it privately via e-mail.
The process is as follows:

• Send me an e-mail describing the security issue.
• Within 24 hours, I will acknowledge your report and provide initial feedback (for example, whether it is indeed a vulnerability and its potential severity).
• Within 7 days, I will work on a fix and release an update.
• Once the update is available, I will publish a security advisory.

• 2025-10-03: Strengthened base32 decoding to use exact integer sizing and tightened writes to avoid potential over-allocation and to prevent out-of-bounds writes.