We review reports against the latest published release and the repository's default branch. Support windows for older releases will be documented when versioned releases are available.

Use Report a vulnerability on this repository's GitHub Security page to submit a private report. Do not disclose vulnerability details, credentials, or user data in a public issue. If private reporting is not yet available, open a public issue asking the maintainers for a private contact channel, without including the vulnerability details.

Include the affected version or commit, impact, reproduction steps, and any suggested fix. Maintainers should enable GitHub private vulnerability reporting before publishing this repository.