Security fixes are applied to the latest code on main.

Do not open public GitHub issues for security reports.

Preferred disclosure path:

1. Use GitHub's private vulnerability reporting for this repository when available.
2. If that is not available, contact the maintainer privately through GitHub: @ManuelCLopes
3. Include a clear description, impact, reproduction steps, and any suggested mitigation.

You can expect:

• acknowledgement within 5 business days
• an initial triage / severity assessment
• follow-up on remediation status or additional questions

Please avoid public disclosure until a fix or mitigation is ready.