Only the latest published minor version receives security fixes.

Please do not open public issues for suspected vulnerabilities.

Instead:

1. Open a private security report in this repository (Security tab), or
2. Contact maintainers through private channels if available.

Include:

• A clear description of the issue
• Steps to reproduce
• Potential impact
• Suggested mitigation (if known)

We will acknowledge reports as quickly as possible and coordinate a fix and disclosure timeline.