Report a vulnerability in tamis privately through GitHub's private vulnerability reporting, never in a public issue.

Only the latest release is supported. Security describes the threat model and the known limits, which are not vulnerabilities on their own.