Security fixes are made against the latest release and the main branch. Older versions are not supported; users may need to upgrade to receive a fix.

Please report suspected vulnerabilities through GitHub's private vulnerability reporting. Do not open a public issue for an undisclosed security problem.

Include the affected version or commit, impact, reproduction steps, and any suggested mitigation. Please avoid including sensitive personal data that is not needed to investigate the report.