Please report security vulnerabilities privately rather than opening a public issue.

Use GitHub's private vulnerability reporting on this repository: open the Security tab and choose Report a vulnerability. This creates a private advisory visible only to the maintainers.

We aim to acknowledge reports within a few days and will keep you updated as we investigate and prepare a fix.

Security fixes are applied to the latest released version. Older versions are not guaranteed to receive updates.