Security fixes go to the latest minor release of @formhaus/core, @formhaus/react and @formhaus/vue. Older minors do not receive patches.

Report vulnerabilities privately through GitHub security advisories. Do not open a public issue.

Include the affected package and version, a minimal definition or code that reproduces the problem, and the impact you expect.