Security fixes are applied to the latest released version and the main branch. Older releases may be asked to upgrade before a fix is provided.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting form instead.

Include the affected version or commit, impact, reproduction steps, relevant configuration, and any suggested mitigation. Remove credentials, personal data, and unrelated private material from the report.

Please allow time to validate the report and prepare a coordinated fix before publishing details.