Security fixes are provided for the latest published release and the current main branch.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository:

1. Open the repository's Security tab.
2. Select Advisories.
3. Select Report a vulnerability.

Include affected versions, impact, reproduction steps, and any suggested mitigation. You should receive an initial response within seven days. Please allow time for investigation and a coordinated release before public disclosure.

Never include live credentials, tokens, or other sensitive data in a report.