Only the latest release receives security updates.

Please report vulnerabilities privately through GitHub Security Advisories. Do not open a public issue.

Include a description, reproduction steps, the affected version, and the potential impact. You can expect an initial response within seven days. Confirmed vulnerabilities will be addressed in a coordinated release; declined reports will receive an explanation.