Security fixes are applied to the latest released version.

Please use GitHub's private vulnerability reporting feature for this repository. Do not open a public issue for an undisclosed vulnerability.

Include the affected version, reproduction steps, impact, and any suggested mitigation. You should receive an initial response within seven days.