Only the latest release is actively supported.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately via GitHub Security Advisory.

1. Go to the repository's Security tab
2. Click Report a vulnerability
3. Fill out the form with details of the issue

You can expect an acknowledgement within 48 hours and a resolution within 90 days.

• Report vulnerabilities privately to the maintainers first
• The maintainers prepare a fix before public disclosure
• Public disclosure happens after the maintainers release a fix, or after 90 days, whichever is sooner