Please report security issues privately through GitHub's Report a vulnerability feature instead of opening a public issue.

Do not include credentials, terminal contents, session transcripts, or private socket/state files in reports. A minimal synthetic reproduction is preferred.

Only the latest release is supported with security fixes.