Only the latest released version receives security updates.

Do not open a public GitHub issue for a suspected vulnerability. Use GitHub's private vulnerability reporting feature and include a description, reproduction steps, and any relevant evidence.

We will acknowledge the report within 48 hours and aim to provide a fix or mitigation within seven business days. Please allow reasonable time for investigation and coordinated disclosure.