Security fixes are applied to the latest release only.

Please do not open a public GitHub issue for security vulnerabilities.

Report security concerns by emailing the maintainer via the contact listed on the GitHub profile, or open a GitHub private security advisory.

We will acknowledge the report within 48 hours and aim to release a patch within 7 days for confirmed vulnerabilities.