Only the latest tagged release receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report it privately via GitHub's "Report a vulnerability" feature (Security tab → Advisories → New draft security advisory).

Include:

• A description of the vulnerability and its impact.
• Steps to reproduce, or a proof-of-concept.
• The version(s) affected.

We will acknowledge reports within a reasonable timeframe and keep you updated as the issue is investigated and fixed.