If you discover a security vulnerability, please check the latest security review, which is listed above. In case the vulnerability you have identified is not listed there or you think it is not covered thoroughly or has been misclassified, please report it privately via GitHub Security Advisories.

Do not open a public issue for security vulnerabilities.

I will acknowledge receipt within 72 hours and aim to provide a fix or mitigation plan within 7 days for confirmed issues.