Security fixes are provided for the latest maintained RejectKid.BitsKit release.

Do not report vulnerabilities in a public issue. Use GitHub private vulnerability reporting and include a minimal reproduction, affected versions, and the potential impact. You should receive an initial response within seven days.

The project will coordinate disclosure and publish a patched release when a vulnerability is confirmed. Please avoid public disclosure until a fix is available.