• The latest release is supported for security fixes.

Please do not open public issues for security vulnerabilities.

Report privately to repository maintainers with:

• Affected version
• Reproduction steps
• Impact assessment
• Suggested fix (optional)

After receiving a report, maintainers will:

1. Confirm receipt.
2. Assess severity and impact.
3. Prepare and release a fix.
4. Publish a brief advisory once users can update.