Security fixes are provided for the latest release on main.
Use GitHub private vulnerability reporting for this repository. Do not open a public issue with exploit details or private document content.
Reports should include the affected version, impact, reproduction steps, and a minimal proof of concept. Maintainers will acknowledge a complete report as soon as practical and coordinate remediation before disclosure.