Security fixes are applied to the latest released version.

Please do not open a public issue for a vulnerability that could expose Home Assistant credentials, private data, or enable unauthorized access.

Use GitHub's private vulnerability-reporting feature for this repository. Include reproduction steps, affected versions, and the expected impact. You should receive an initial response within seven days.