Please report security issues privately — do not open a public issue or PR.

• Email security@pinecone.io, or
• Use GitHub's private vulnerability reporting on this repository (Security → Report a vulnerability).

Include the version or commit, affected PostgreSQL major, and steps to reproduce. We'll acknowledge your report and keep you updated on the fix and disclosure timeline.

Security fixes land on main and in the latest release line. Older releases are supported on a best-effort basis; upgrade to the newest release before reporting where you can.