Security updates are provided for the latest released version of async-hybrid-cache.

Before a 1.0 release, public APIs may still change between minor versions. Security fixes may be released as patch versions when practical, or as the next minor release when the fix requires an API change.

Please do not open a public issue for a suspected vulnerability.

Report vulnerabilities through GitHub private vulnerability reporting for this repository, or contact the maintainer directly if private reporting is unavailable.

Include:

• A description of the issue and affected provider or feature.
• Steps to reproduce or a minimal proof of concept.
• The versions of async-hybrid-cache, Python, and any optional provider dependency involved.
• Any known mitigations.

You should receive an initial response within 7 days. Confirmed vulnerabilities will be handled with a fix, release, and disclosure notes appropriate to the severity.