Only the latest release is actively supported.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately via GitHub Security Advisory.

1. Go to the repository's Security tab
2. Click Report a vulnerability
3. Fill out the form with details of the issue

You can expect an acknowledgement within 48 hours and a resolution within 90 days.

• Vulnerabilities are disclosed privately to the maintainers first
• A fix is prepared before public disclosure
• Public disclosure happens after a fix is released or 90 days have passed, whichever is sooner