Please report suspected vulnerabilities privately through GitHub's private vulnerability reporting for this repository. Do not open a public issue with exploit details, credentials, private result data, or an unpatched weakness.

Include the affected component, the release or commit tested, reproduction steps, impact, and any suggested mitigation. The maintainers will acknowledge the report and coordinate validation and disclosure.

Security fixes target the current released artifacts and the active main branch. Frozen historical releases may receive guidance instead of a new build when a safe upgrade path is available.