Security fixes are prepared for the current main branch and the latest published GitHub release. Earlier releases do not receive security updates.
| Version | Security updates |
|---|---|
main |
Yes |
| Latest published GitHub release | Yes |
| Earlier releases | No |
Please report suspected vulnerabilities privately through GitHub:
- Open this repository's Security tab.
- Select Report a vulnerability.
- Submit the report through GitHub Private Vulnerability Reporting. Maintainers will coordinate triage and remediation in a private GitHub Security Advisory.
Do not disclose vulnerability details in a public Issue, Discussion, pull request, or other public channel. Please allow maintainers to investigate and coordinate a fix before public disclosure.
Include the affected version or commit, reproduction steps, potential impact, and any suggested mitigation. Use test data only, and do not access data or deployments that you do not own or have explicit permission to test.