Security fixes support the latest release and the main branch. Earlier releases are not supported.

Report vulnerabilities privately through GitHub private vulnerability reporting. Open the repository's Security tab. Select Report a vulnerability and submit your report. Do not open public issues for vulnerabilities.

Include these details in your report:

• The affected release or commit.
• Your operating system and relevant configuration.
• A description of the vulnerability and its possible impact.
• Steps to reproduce the problem.
• A small example or proof of concept, if available.
• A possible fix, if known.

Remove passwords, tokens, and other private data from examples and logs.

The maintainer will reply as soon as possible. There is no fixed response time.