Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository. Include affected versions, reproduction steps, impact, and any suggested mitigation.
We will acknowledge reports within 7 days and provide status updates while we investigate.
Only the latest published major version is supported with security fixes.