Please do not open a public issue, pull request or discussion for security problems.

Report vulnerabilities privately through GitHub's private vulnerability reporting:

1. Go to the repository's Security tab.
2. Click Report a vulnerability.
3. Describe the issue, the affected version or commit, and steps to reproduce.

The report is visible only to the maintainers. You will get an acknowledgement in the advisory thread, and we will coordinate a fix and disclosure with you there.

Only the latest release and the main branch receive security fixes.