Security fixes are made against the latest release and main.

Please use GitHub's private vulnerability reporting for this repository: open the Security tab, choose Advisories, then choose Report a vulnerability.

Include the affected version, macOS version, impact, reproduction steps, and any suggested mitigation. Please do not include credentials, personal data, or destructive proof-of-concept steps.

Do not open a public issue until a fix or coordinated disclosure plan is ready.