Please do not open a public issue for security problems.

Report vulnerabilities privately to the maintainer at:

• GitHub private vulnerability reporting: use the "Report a vulnerability" button on the affected repository's Security tab, or
• Email: reach out via the contact information on the official website.

Please include:

1. The repository and affected version.
2. A description of the vulnerability and its impact.
3. Steps to reproduce (minimal, if possible).

You will receive an acknowledgement within 7 days, and we will keep you informed about the status of the fix.

Only the latest release of each project is supported with security fixes. For the active development branch of a project, see that project's README.

We will coordinate disclosure together with you and credit you in the changelog, unless you prefer to stay anonymous.