Please do not report security vulnerabilities in public GitHub issues.

Use GitHub's private vulnerability reporting to provide a description, reproduction steps, affected versions, and any suggested mitigation. If private reporting is not enabled yet, contact the repository owner privately through GitHub instead.

We will acknowledge reports as soon as practical, investigate the issue, and coordinate a fix and disclosure timeline with the reporter.

Security fixes are applied to the latest released version and the default branch. No older versions receive security support.