Security fixes are applied to the latest release on main.

Please do not open public issues for security reports.

Report vulnerabilities privately via GitHub Security Advisories:

1. Open the repository's Security tab.
2. Select Report a vulnerability.
3. Provide reproduction details, impact, and any mitigation notes.

If private reporting is unavailable, contact the maintainer directly and include:

• Affected version/commit
• Steps to reproduce
• Expected vs actual behavior
• Potential impact

We will acknowledge receipt, investigate, and coordinate disclosure once a fix is available.