avedon is pre-1.0. Security fixes are applied on the current main branch only. There is no LTS matrix yet.
Do not open a public GitHub issue for security vulnerabilities.
Please report vulnerabilities using GitHub private vulnerability reporting on this repository (Security → Advise a vulnerability / Report a vulnerability).
We will acknowledge the report as soon as practical, assess impact, and coordinate a fix and disclosure timeline with you.