Please do not report security vulnerabilities in public issues, pull requests or discussions.

Report them privately through GitHub: open the repository's Security tab and choose Report a vulnerability. Include the affected version, a description of the issue and steps to reproduce it. We will acknowledge the report, keep you updated while we investigate, and credit you in the advisory if you wish.

Only the latest release receives security fixes.