Security updates are provided by releasing a new version of Ibis.
- Privately send security reports to the security team.
- Emails sent to this address are sent to a private Zulip channel where only members of the Ibis security team can see them.
- Vulnerability reports are published on GitHub at https://github.com/ibis-project/ibis/security/advisories
- If a vulnerability is accepted we will attempt to address it as soon as possible, by cutting a new release.