Only the latest master release is supported for security fixes.
Please do not open public issues for vulnerabilities.
Use GitHub private vulnerability reporting:
Include:
- Impact summary
- Reproduction steps
- Affected version/commit
- Suggested mitigation (if known)
We aim to acknowledge reports within 72 hours.