Security fixes are applied to the latest release and the current master branch.

Please do not open a public issue for an unpatched security vulnerability. Use GitHub's private vulnerability reporting or contact the repository maintainer through the GitHub profile with:

• A clear description of the issue.
• Reproduction steps or a minimal proof of concept.
• Affected version or commit.
• Any suggested mitigation.

Please allow reasonable time for triage and an initial response before making the issue public.