Security fixes are applied to the latest main branch.
Please report vulnerabilities privately before public disclosure.
Include:
- affected component
- reproduction steps
- potential impact
- suggested mitigation (if available)
Avoid opening public issues for undisclosed vulnerabilities.