Report vulnerabilities privately through GitHub's private vulnerability reporting. Do not open a public issue.

Include the steps to reproduce the problem and its potential impact. You can expect an initial response within a week.

Only the current main branch is supported with security fixes.