Do not report security vulnerabilities in public issues or discussions.

Use GitHub's Report a vulnerability flow on this repository's Security tab. Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. If private vulnerability reporting is temporarily unavailable, contact the maintainer through the private contact method listed on their GitHub profile rather than publishing details.

You should receive an acknowledgement within seven days. Please allow time for investigation and a coordinated fix before disclosing the issue publicly.

Only the current main branch is supported with security fixes.