Security updates are handled on the main branch.

Please report suspected vulnerabilities using GitHub's private vulnerability reporting for this repository. If that is unavailable, open a GitHub issue with only non-sensitive details and request a private follow-up.

Do not include secrets, tokens, credentials, or exploit details in public issues.