Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository. Include affected versions, reproduction steps, impact, and any suggested mitigation.

We will acknowledge reports within 7 days and provide status updates while we investigate.

Only the latest published major version is supported with security fixes.