Security fixes are applied to the latest release on the default branch.

Please report security issues privately to the repository maintainers rather than opening a public GitHub issue. Include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact

We will acknowledge receipt and work on a fix before public disclosure when possible.