Please report security vulnerabilities privately via GitHub's Private Vulnerability Reporting feature on this repository (Security tab -> "Report a vulnerability"), rather than opening a public issue.

Do not include exploit details, credentials, or sensitive data in a public issue or PR.

Only the latest state of the default branch receives fixes.