This code is mainly used by envoy. Please follow envoy security policy.
This repo is small, there is not versioned releases. Please always use top of the tree. If there is any bugs or security fixes, they will be fixed in the master branch.
Please report any vulnerability to envoy according to its security policy.