Security fixes are applied to the latest released version.

Use Report a vulnerability on the repository's Security tab. Please do not open a public issue for a suspected vulnerability.

Include the affected version, a minimal reproduction, the expected impact, and any suggested mitigation. Maintainers will acknowledge the report and keep you updated while it is investigated.