Only the latest release receives security fixes.
Please do not open a public GitHub issue for security vulnerabilities.
Instead, report them privately via GitHub's private vulnerability reporting or by emailing the maintainer directly.
Include as much detail as possible:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes
You can expect an acknowledgement within 72 hours and a fix or mitigation plan within 14 days for confirmed issues.