Security fixes are currently provided for the latest published release.

Please use GitHub's private vulnerability reporting for this repository:

1. Open the repository's Security tab.
2. Choose Advisories.
3. Select Report a vulnerability.

Do not open a public issue with exploit details, private media, local paths, credentials, or logs containing sensitive information. Include the affected version, reproduction steps, impact, and the smallest safe proof of concept.

The maintainers will acknowledge a valid report through the private advisory, investigate it, and coordinate disclosure and remediation there.