Security fixes target the latest revision on the default branch.
Use GitHub's private vulnerability reporting feature for this repository. Do not include secrets, personal data, private save files, or an exploit in a public issue. Include the affected revision, reproduction steps, impact, and the smallest safe proof of concept.
No support or response-time guarantee is provided, but good-faith reports will be reviewed as project capacity allows.