Security updates are applied to the latest release line maintained in this repository. Older major or minor lines may not receive backports unless explicitly documented in a release note.

Please report security issues privately so we can assess and address them before wider disclosure.

Private vulnerability reporting is not currently supported.

If you discover a security issue, please disclose it responsibly by contacting the maintainers via GitHub:

• @FlawzyByte
• @subhramit
• @axmsoftware

You may also submit a Pull Request with the remediation and request review from one of the maintainers above.

Include enough detail to reproduce the issue (affected component or class, version or commit, and steps or proof of concept when possible).

We ask that you allow a reasonable time for investigation and remediation before public disclosure, and coordinate with maintainers on timing when practical.