Only the latest release and main are supported with security fixes.

Please report vulnerabilities privately via GitHub's private vulnerability reporting (Security tab → "Report a vulnerability" on this repo). Do not open a public issue for security reports.

There is no bounty program. Reports are handled on a best-effort basis.