Use this section to tell people about which versions of your project are currently being supported with security updates.

GitHub private security vulnerability reporting should be enabled for astropy. But if that does not work for whatever reason, please report to coordinators[at]astropy.org (also see Astropy Team listing).

We will respond as soon as we are able. If vulnerability is accepted, we will work on a hotfix ASAP but that might still take a few weeks given the limited resources. If a vulnerability is declined, we will take no further action as far as code is concerned. Either way, we will communicate back with you.

Thank you for your help!