Security fixes are expected to land on the latest release line and main.

Please avoid posting exploit details in a public issue.

If GitHub private vulnerability reporting is enabled for this repository, use it. Otherwise, open a minimal issue without reproduction details and request a private follow-up channel.