Only the latest release on the main branch receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Report security issues by creating a GitHub private security advisory. You will receive a response within 72 hours.

Include:

• A description of the vulnerability and its impact
• Steps to reproduce
• Any suggested fix (optional but appreciated)

We will acknowledge receipt, investigate, and coordinate a fix and disclosure timeline with you.