This project currently supports the latest version on the default branch (master).
If you believe you’ve found a security vulnerability:
- Do not open a public GitHub issue with details.
- Send a report describing the issue, impact, and a minimal reproduction (if possible).
If the repository has GitHub Security Advisories enabled, please use “Report a vulnerability” in the Security tab.
If not, open a GitHub issue with the title “Security contact needed” (without sensitive details) and we’ll coordinate a private disclosure path.