Please do not disclose suspected vulnerabilities in a public issue, discussion, or pull request.

Report vulnerabilities privately through GitHub Security Advisories. Include the affected version, impact, reproduction steps, and any known mitigations.

The maintainers will acknowledge a report as soon as practical, investigate it, and coordinate disclosure and remediation with the reporter. Please allow time for a fix to be prepared before publishing details.

Until the first stable release, security fixes are applied to the latest development version. After stable releases begin, this section will identify the supported release lines.