Security Policy

Reporting a Vulnerability

Report suspected vulnerabilities through GitHub private vulnerability reporting for this repository:

Do not open a public issue for a vulnerability report. Include the affected version, reproduction details, expected impact, and any known workaround.

Security fixes are provided for the latest published major version unless a separate support policy is documented in a release note.