Only the latest release on the default branch is supported with security updates.

Please do NOT open a public GitHub issue for security vulnerabilities.

If you discover a security vulnerability in this project, please report it privately using GitHub's built-in vulnerability reporting:

Report a vulnerability

When reporting, please include:

• A clear description of the vulnerability
• Steps to reproduce the issue
• The potential impact (what an attacker could achieve)
• Any suggested mitigations if you have them

You can expect an acknowledgment within 48 hours of submitting the report. We will work with you to understand and address the issue before any public disclosure.

Thank you for helping keep this project secure.