Only the latest release receives security fixes. Please update to the latest release before reporting a vulnerability.

Please do not open a public issue for security vulnerabilities.

Report privately via GitHub Security Advisories for this repository. Include affected version(s), macOS version, and reproduction steps.

We'll acknowledge reports as soon as possible and follow up once the issue has been triaged. If accepted, a fix will be released and credited in the release notes unless you request otherwise; if declined, we'll explain why.