Security fixes are prioritized for the latest released version and the current main branch.
If you discover a security issue, do not open a public GitHub issue.
Report it privately by email:
Please include:
- A clear description of the issue
- Reproduction steps or proof of concept
- Potential impact
- Suggested remediation (if available)
You will receive an acknowledgement within 3 business days.