Report vulnerabilities in Borg to security@dx-corp.net. Do not open a public issue for a security report.

Borg is a projection of rust/tools/borg in dx-corp/mono. Fixes land in Mono and reach this repository through the same projection pipeline that publishes it, so a fix appears here as a generated pull request on the sync/mono-projection branch.