Security fixes are applied to the following lines.

Do not open a public issue for an undisclosed vulnerability. Use GitHub Private Vulnerability Reporting and include affected versions, reproduction steps, impact, and any proposed mitigation.

The maintainer will acknowledge a complete report within seven days, coordinate a fix and disclosure timeline, and credit the reporter unless anonymity is requested.

Please allow a reasonable remediation period before public disclosure. Security releases are documented in CHANGELOG.md and the corresponding GitHub release.