Security fixes are provided on the latest default branch.

Please do not open public issues for sensitive vulnerabilities.

Use GitHub private vulnerability reporting for this repository. If private reporting is not enabled, contact the maintainers privately before sharing exploit details publicly.

Include:

• Impact summary
• Reproduction steps
• Suggested remediation (if available)

The maintainers will acknowledge receipt and provide a remediation timeline.