Please use GitHub's private vulnerability reporting form for GixPython when it is enabled. You can also contact Sebastian Thiel at sebastian.thiel@icloud.com.

Include the affected version, Python version and platform, build features, impact, and a minimal reproduction. Please avoid public disclosure of sensitive details while a fix is being coordinated.

For a vulnerability in the native engine, Gitoxide's security policy describes its reporting process.

The first release series is 0.1.x, supporting macOS 11+ on Apple Silicon and Intel. Once published, security fixes target the latest 0.1.x release. There is no long-term support series. Linux and Windows are not supported release platforms.