Security fixes are currently maintained on the main branch.

Please do not disclose suspected vulnerabilities in a public issue.

Use GitHub's private vulnerability reporting or Security Advisory workflow for this repository when available. If private reporting is unavailable, open a minimal public issue requesting a private contact channel without including exploit details, credentials, sensitive datasets, or reproduction payloads.

Useful reports include the affected component, impact, prerequisites, minimal reproduction steps, and a proposed mitigation when known.

The maintainer will validate the report, coordinate a fix, and publish remediation details after affected users have a reasonable opportunity to update.