Security fixes are handled on the latest released version.
Please do not open a public issue for a suspected vulnerability.
Send a private report to the maintainer with:
- affected version or commit
- reproduction steps
- expected and actual behavior
- impact summary
The maintainer will review the report and respond with next steps.