Please report security issues privately through GitHub Security Advisories instead of a public issue. Include the affected version, reproduction steps, and impact. Do not include private source images or project files unless they are required to reproduce the issue.

The latest release is the only supported version. Maintainers will acknowledge a report as soon as practical and coordinate disclosure after a fix is available.