If you find a security problem in Debris, report it privately: open the Security tab of this repository and use "Report a vulnerability". Please keep it out of the public issue tracker until there is a fix.

I read reports there and reply in the advisory. A fix goes out as a new release and the advisory is published with it. Only the latest release gets fixes.