Security updates are provided for the latest release on the main branch.
When possible, fixes may be backported to recent releases.
Please do not open a public issue for security vulnerabilities.
Report vulnerabilities privately through GitHub Security Advisories:
Include as much detail as possible:
- Affected version(s)
- Impact and severity
- Reproduction steps or proof of concept
- Suggested remediation (if known)
We will acknowledge valid reports as quickly as possible and coordinate disclosure after a fix is available.