Security fixes are provided for the latest published release.
Please use GitHub's private vulnerability reporting feature under the repository's Security tab. Do not publish sensitive vulnerability details in a public issue.
Include the affected version, reproduction steps, impact, and any suggested mitigation. Reports will be acknowledged as soon as practical.