Security fixes are applied to the latest version on the master branch.

Do not open a public issue for a suspected security vulnerability.

Send a private report to the repository owner through GitHub. Include:

• A description of the vulnerability
• Reproduction steps
• The expected impact
• Any suggested remediation

Please allow reasonable time for investigation and remediation before public disclosure. You can expect an acknowledgment after the report is reviewed.