Security fixes are applied to the latest release.

Report vulnerabilities privately through GitHub Security Advisories. Include the affected version, impact, reproduction steps, and suggested mitigation. Do not publish exploitable server details in a public issue.