Please report suspected vulnerabilities privately through GitHub's vulnerability reporting form. Don't open a public issue for an undisclosed vulnerability.

Include the affected version, steps to reproduce, and the potential impact. Don't include credentials or other sensitive data in the report.

Security fixes are made on main and included in future releases. Use the latest release; older releases aren't maintained separately.