Please report vulnerabilities privately via GitHub's private vulnerability reporting rather than opening a public issue.

Include steps to reproduce and the potential impact. You can expect an initial response within a week.

Only the current main branch is supported with security fixes.