Security fixes are applied to the latest code on the default branch.

Please use the repository's Security tab and choose Report a vulnerability to send a private report. Do not disclose suspected vulnerabilities in a public issue.

Include the affected area, reproduction steps, potential impact, and any suggested mitigation. You should receive an acknowledgement within seven days.

If private vulnerability reporting is unavailable, contact the repository owner through the contact method listed on their GitHub profile.