Security updates are provided for the current repository version only.

Please report suspected vulnerabilities through a GitHub Private Security Advisory. Do not disclose unpatched vulnerabilities publicly.

Include the following information in your report:

• Affected version(s) and environment
• Clear reproduction steps or proof of concept
• Expected impact and any known mitigations

We will acknowledge receipt within 3 business days and provide status updates at least every 7 days until resolution.

If the report is accepted, we will work on a fix and coordinate disclosure timing with you. If the report is declined, we will share the reason (for example, not reproducible, out of scope, or already addressed).