Only the latest major release receives security updates.

Do not open a public issue for security vulnerabilities.

Please report security concerns using GitHub's private vulnerability reporting. This allows the report to remain confidential until a fix is available.

If private vulnerability reporting is not enabled on this repository, contact the maintainer directly through their GitHub profile.

• Acknowledgment: within 7 days of the report.
• Resolution: best effort, depending on severity and complexity.

Please do not disclose the vulnerability publicly until a fix has been released.