Security updates are provided for the latest release line.

Please do not open public issues for security vulnerabilities.

Report security issues privately by emailing the maintainer listed on the project profile, or by using GitHub private vulnerability reporting if enabled on the repository.

When reporting, include:

• A clear description of the issue
• Reproduction steps and server/plugin versions
• Potential impact
• Any proof-of-concept details

You can expect an initial acknowledgement within 7 days.