MongoLite follows semantic versioning. Only the latest major version receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report it privately using one of these channels:

• GitHub Security Advisories (preferred)
• Email oliver@semics.co.uk

Include as much detail as you can: affected version, a reproduction case, and the potential impact. We'll acknowledge reports within a few days and aim to ship a fix or mitigation before any public disclosure.