Security fixes are applied to the current default branch. Tagged releases, if any, are supported only when explicitly stated in their release notes.

Please use GitHub's private vulnerability reporting or a private security advisory for this repository. Do not disclose a suspected vulnerability in a public issue before a fix is available.

Include affected versions or commits, reproduction steps, expected impact, and any suggested mitigation. Reports will be acknowledged and assessed as maintainer availability permits.