Security fixes are provided for the latest released minor version.

Please use GitHub private vulnerability reporting for this repository. If that interface is unavailable, open a public issue containing no exploit details or private data and ask the maintainer for a private contact channel.

Do not attach real DSH sessions, credentials, proprietary code, or personal information. Build a minimal synthetic reproduction.

Reports should include affected version, impact, reproduction conditions, and a suggested mitigation when known. You can expect an acknowledgement within seven days.