The lettre project team welcomes security reports and is committed to providing prompt attention to security issues. Security issues should be reported via GitHub's Private vulnerability reporting. Security issues should not be reported via the public GitHub Issue tracker.
Security issues will be announced via the RustSec advisory database.