Security fixes are applied to the latest release only. Older releases are not patched.

Please report security vulnerabilities privately through GitHub's private vulnerability reporting rather than opening a public issue.

Expect an acknowledgement within a few days. If the report is confirmed we will prepare a fix and coordinate disclosure with you; if it is declined we will explain why.