Synapse is pre-1.0. Only the latest release is supported with security fixes.

Please report security vulnerabilities privately via GitHub Security Advisories rather than opening a public issue.

Include as much detail as you can: affected version, reproduction steps, and impact. This is a small open source project maintained on a best-effort basis — there's no formal SLA, but reports will be triaged and acknowledged as soon as possible.