Please report security issues privately through GitHub Security Advisories. Do not include secrets or exploit details in a public issue. If private reporting is unavailable, open a public issue with only a minimal, non-sensitive description.
Security fixes target the latest release and main.