Switch is currently pre-1.0. Security fixes are applied to the latest development line and, once releases exist, to the latest supported pre-release/release line.
Please do not publish vulnerability details in a normal GitHub issue.
Use GitHub private vulnerability reporting for this repository when available. If that UI is unavailable, contact the maintainer through the repository owner's GitHub profile and request a private channel before sharing technical details.
Include the affected revision/release, platform/compiler, a minimal reproduction, expected impact, and any known workaround.
Public disclosure should wait until a fix or coordinated disclosure plan exists.