Please report security vulnerabilities through GitHub private vulnerability reporting. Do not disclose a suspected vulnerability in a public issue.

Include the affected version or commit, reproduction steps, impact, and any suggested remediation. Reports will be acknowledged and assessed as quickly as practical.

Only the latest version on the default branch is supported with security updates.