Security fixes are made against the latest version published on NuGet. Older versions may receive fixes where practical, but upgrading to the latest release is recommended.

Please report suspected vulnerabilities privately through GitHub Security Advisories. Do not open a public issue for a vulnerability that has not yet been disclosed.

Include the affected version, a clear reproduction, the expected impact, and any suggested mitigation. I aim to acknowledge reports within five working days and will provide updates while the report is being assessed and fixed.