Security fixes are provided for the latest published 0.2.x release.

Please use GitHub's private security advisory flow for this repository instead of opening a public issue.

Include the affected version, a minimal reproduction, expected impact, and any proposed mitigation. Do not attach real Telegram tdata directories, session strings, authentication keys, passcodes, or other credentials. Replace all sensitive values with synthetic fixtures.

Maintainers will acknowledge a complete report as soon as practical, investigate it privately, and coordinate disclosure with the reporter before publishing a fix.