Security fixes are provided for the latest release.

Report vulnerabilities privately through GitHub Private Vulnerability Reporting. Do not open a public issue before a fix is available.

Reports should include the affected version, impact, reproduction steps, and any known mitigation. Maintainers will acknowledge a report within seven days.