Security fixes are provided for the latest main branch.
Please report vulnerabilities privately by opening a GitHub Security Advisory in this repository.
Include:
- Affected component or file path
- Reproduction steps / proof of concept
- Impact assessment
- Suggested remediation (if available)
Do not disclose details publicly until a fix is available.
- Initial triage: within 72 hours
- Mitigation plan: within 7 days for confirmed issues