Security fixes are applied to the current main branch. Older revisions and deployments based on them are not supported.

Please do not open a public issue for a suspected vulnerability.

Use GitHub private vulnerability reporting: open the repository's Security tab, choose Report a vulnerability, and include the affected component, reproduction steps, potential impact, and any suggested mitigation.

This is a personal project, so reports are handled on a best-effort basis and no response-time commitment is offered. You can expect the report to remain private while it is assessed, an acknowledgment when the report is reviewed, follow-up questions when more detail is needed, and notice when a resolution or disclosure decision is available.

Please give the maintainer a reasonable opportunity to investigate and address the issue before sharing it publicly.