Security fixes are provided for the latest release on the main branch.
Do not disclose suspected vulnerabilities in a public issue. Use GitHub's private security advisory form for this repository and include affected versions, reproduction steps, impact, and any suggested mitigation.
Maintainers will acknowledge a report within seven days and provide status updates until the report is resolved or closed.