Security fixes are applied to the current 3.x line. Older majors are best-effort.

Please do not open a public GitHub issue for security reports.

Instead, use GitHub's private vulnerability reporting for this repository.

Include, where possible:

• affected version(s) of directus-extension-api-docs and Directus;
• a minimal reproduction or proof of concept;
• the impact you observed.

You'll receive an acknowledgement within a reasonable time; a fix or mitigation will be coordinated before public disclosure.