Security fixes are provided for the latest published release.
Use GitHub's private vulnerability reporting for this repository. Do not open a public issue for a suspected vulnerability.
Include the affected version, platform, a minimal reproduction, and the expected impact where possible.