Security fixes are applied to the latest development branch and the latest published release line when feasible.
Please use GitHub's private vulnerability reporting for this repository.
If private reporting is not available, contact the maintainers through a private channel and include:
- a short description of the issue
- affected versions
- a minimal proof of concept
- any suggested mitigation
Please do not open public issues for security vulnerabilities before a fix is available.