Security fixes go into the latest release of the ephyra crates (ephyra, ephyra-macros, ephyra-cli, ephyra-datadog) and into main.

If you have found a security issue in ephyra, please contact the Datadog security team at security@datadoghq.com rather than filing a public issue. Include what you found, how to reproduce it, and the versions affected.

The case studies in case-studies/ test other projects (SQLite, PostgreSQL, Turso, ada, Cedar, sqleq); a vulnerability in one of those projects should be reported to that project according to its own security policy.