Security fixes are made against the latest release and the main branch.

Please report suspected vulnerabilities through GitHub's private vulnerability reporting. Do not open a public issue for an undisclosed security problem.

Include the affected version, impact, reproduction steps, and any suggested mitigation. Please avoid including sensitive personal data that is not needed to investigate the report.