If you discover a security vulnerability in this project, please report it privately rather than opening a public issue.

Please include as much of the following information as possible:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof-of-concept if you have one
• The affected version(s) or commit hash
• Any suggested mitigation

You can expect an initial response within a few days. Please do not disclose the vulnerability publicly until it has been addressed.

Only the latest released version is actively maintained. If you're on an older version, please try to reproduce the issue on the latest before reporting.