Security updates are applied to the latest version on the default branch.
Please do not open public issues for security-sensitive reports.
Instead, contact the maintainers privately with:
- A clear description of the issue
- Reproduction steps or proof of concept
- Potential impact
- Suggested remediation (if known)
We will acknowledge receipt as quickly as possible and provide status updates during triage and remediation.