Security fixes are provided for the latest published release.

Please use GitHub's private vulnerability reporting. Do not include credentials, private thread data, or cache contents in a public issue.

Include the affected version, the operating system, a concise reproduction, and the impact. Redacted logs are welcome when they help reproduce the problem.