Security fixes are applied to the latest version on the default branch.

Do not disclose a vulnerability in a public issue. Use GitHub's private vulnerability reporting or security-advisory flow for the FormDrive repository and include:

• The affected route, component or dependency
• Reproduction steps or a minimal proof of concept
• Expected and observed behavior
• Potential impact
• A suggested mitigation, if available

Reports will be assessed before public disclosure. Please avoid accessing data that does not belong to you and do not disrupt public deployments while testing.