Security fixes are provided for the latest published minor release.
Please use GitHub's private vulnerability reporting for this repository rather than opening a public issue. Include affected versions, reproduction steps, impact, and any suggested mitigation. You should receive an initial response within seven days.