Security fixes are applied to the latest released 1.x version published on NuGet as FixedWidthParser.NET.

Please do not report security vulnerabilities through public GitHub issues.

Instead, use one of the following private channels:

1. Preferred: GitHub's private vulnerability reporting — open a report.
2. Email the maintainer at gabrielandremarquez.matte@gmail.com with the details.

Please include:

• a description of the vulnerability and its impact;
• steps to reproduce (a minimal model + input is ideal);
• affected version(s).

You can expect an initial acknowledgement within 5 business days. Once the issue is confirmed, a fix and coordinated disclosure timeline will be agreed with you before any public announcement.