Only the latest released version is supported with security fixes.

Please do not open public issues for security vulnerabilities.

Send a private report with:

1. Affected version
2. Impact summary
3. Reproduction steps or proof of concept
4. Suggested remediation (if available)

1. Initial acknowledgement within 3 business days.
2. Triage and severity assessment after reproduction.
3. Coordinated disclosure once a fix is available.