Security updates are provided for the latest stable release line.

If you discover a security issue, please do not open a public issue.

Use GitHub's private vulnerability reporting for this repository:

• Go to the repository's Security tab.
• Click Report a vulnerability.
• Include clear reproduction steps, impact, and affected files/paths.

If private reporting is unavailable for your account, open a regular issue with minimal detail and request a private contact channel first.

• Initial acknowledgment target: within 7 days
• Triage and severity assessment: as soon as possible
• Fix and release timeline: depends on impact and complexity

Please allow reasonable time for a fix before public disclosure.