Security Policy

Supported version

Security fixes are applied to the current main branch. This project does not currently maintain older release branches.

Please do not disclose a suspected vulnerability in a public issue.

Use GitHub's private vulnerability reporting flow:

Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. Reports will be reviewed before public disclosure.