Only the latest minor release receives security patches.
Do not open a public issue.
Email [email protected] with:
- Description of the vulnerability
- Steps to reproduce
- Impact assessment
- (Optional) Suggested fix
We will acknowledge receipt within 48 hours and aim to release a patch within 7 days of confirmation.