Only the latest release is actively supported.
Please open a private security advisory in GitHub Security or email:
Include:
- affected version
- reproduction steps
- expected vs observed behavior
- potential impact
We aim to acknowledge reports within 72 hours.
See docs/threat-model.md for scope and non-goals.