Security fixes are supported on the latest published version.

Report vulnerabilities through the repository's private Security → Report a vulnerability form. If private reporting is unavailable, ask a project maintainer for a private reporting channel without disclosing details in a public issue.

Include affected versions, reproduction steps, impact, and any suggested mitigation. Do not include real API keys, signer access codes, documents, or personal data.