If you discover a security vulnerability, report it through GitHub private vulnerability reporting. Please do not open a public issue for an undisclosed vulnerability.

Please include:

• Description of the issue
• Steps to reproduce
• Potential impact

We will acknowledge the report as soon as practical, investigate it, and coordinate disclosure with the reporter before publishing details.

Only the latest GitHub release is actively supported with security fixes.