We support the latest minor/patch of the current major release.

• Please do not open public issues for security reports.
• Email the maintainers or open a private advisory on GitHub Security Advisories.
• Include:
  • Affected files/versions
  • Steps to reproduce
  • Impact assessment
  • Proposed fix if available

We aim to acknowledge reports within 72 hours and provide a remediation plan within 14 days.