Please report security issues privately through GitHub Security Advisories instead of opening a public issue.

Include the affected version, steps to reproduce, and the impact you observed. You should get a first response within 7 days.

Only the latest release receives security fixes.