Security fixes are provided for the latest released minor version.
Please report security issues privately to the repository owner. Do not open a public issue for suspected credential leaks, authentication bypasses, or request-body exposure.
Include:
- Affected version or commit.
- Minimal reproduction steps.
- Impact and affected API area.
- Any known workaround.
Do not include SAS Viya tokens, usernames, passwords, client secrets, tenant URLs, or customer data in issues, pull requests, logs, traces, or tests.