Security fixes are made against the latest tagged release. If you use an older version, upgrade to the latest release before reporting an issue that may already be fixed.

Please report vulnerabilities through GitHub's private vulnerability reporting on the repository's Security tab. Include the affected version, impact, and steps to reproduce. Do not disclose the report in a public issue or pull request before a fix is available.

The maintainers will review the report and coordinate a fix and disclosure through GitHub Security Advisories.