Please report security issues privately, not via public issues or pull requests.

• Preferred: GitHub private vulnerability reporting — open the repository's Security tab → Report a vulnerability. This opens a private advisory visible only to the maintainers.

Please include enough to reproduce (affected version/commit, platform, and a minimal test case). We aim to acknowledge reports promptly and will coordinate disclosure with you.

rawusb is pre-1.0 (0.x). Security fixes are released against the latest published version only; please upgrade to the latest 0.x release to receive them.