Security fixes are provided for the latest default branch.
Please report vulnerabilities privately via GitHub Security Advisories (preferred) or direct contact. Do not open public issues for unpatched vulnerabilities.
Include:
- affected repository and version/commit
- reproduction steps
- impact assessment
- possible mitigation
We will acknowledge receipt as quickly as possible and coordinate a fix + disclosure timeline.